This year’s finalists are harnessing IT for the greater good. Read about scientists employing Linux 
supercomputers to plan disaster cleanups and surgeons using 3-D imaging in the operating room. 
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Microsoft Fees Now Buy More | \Jeyy Sarbanes-Oxley Apps 


most significant step yet to- 


DG) 


enet 


Software Assurance 


NEWSPAPER 


customers will get 
support, training 


BY CAROL SLIWA 
Microsoft Corp. last week 
made good on a long-standing 
pledge to add value to its con- 
troversial Software Assurance 
maintenance program. 
The company dis- 
closed plans to provide 
expanded support, 


training and Office home-use | 
benefits starting in September. 
Although Microsoft has 
been tweaking the program | 
| 

! 


for months [QuickLink 31514], 
last week’s disclosure was the 


Offshore Ops to. 
Get Stronger 
Privacy Lock 


US. firms that outsource 
work to India welcome 
legislation to protect data 


BY JAIKUMAR VIJAYAN 
India’s Ministry of Informa- 
tion Technology and the coun- 
try’s main software trade asso- 
ciation are drafting a data pro- 
tection act designed to allay 
growing privacy concerns in 
the U.S. and Europe related to 
offshore outsourcing. 

The legislation, expected to 
be enacted around the begin- 
ning of next year, would pro- 





aL 
SUPPORT 


ward addressing the concerns 
raised by customers since the 
Software Assurance program’s 
abrupt introduction in May 
2001. 

Until now, the chief benefit 
for companies has been up- 


| grade rights to products cov- | 


ered under their two- or three- 
year contracts. For 
that, they have paid an 
annual fee of 25% of 
the volume license 


| cost for server products and 


29% for desktop products. 

“T think there was a feeling 
they either needed to do more 
or charge less,” said one cus- 

Microsoft, page 16 | 


Few products for managing compliance with 
the financial reporting law are comprehensive 





BY THOMAS HOFFMAN 

A growing number of software 
vendors are starting to offer 
applications designed to help 


| companies comply with the fi- 


nancial reporting require- 
ments of the Sarbanes-Oxley 
Act. But most of the products 
are point solutions that focus 
on specific areas, such as in- 
ternal accounting controls. 
For example, Oracle Corp. 
last week announced a set of 


| software tools for addressing 


vide legal safeguards to ensure | 
data privacy protection in In- 
dia, said Kiran Karnik, presi- 
dent of the National Associa- 
tion of Software and Service 


| Companies, known as Nass- 


com, in New Delhi. 

The new rules are being 
drafted primarily to address 
the European Union’s strict 
privacy requirements, Karnik 
said. EU laws prohibit compa- 
nies from exporting data to or 
storing data in countries that 
lack privacy safeguards com- 
parable to the EU’s. “The EU 
has very stringent laws with 

Data Privacy, page 14 | 


ONLINE RESOURCES 
For extensive coverage of privacy issues, 
visit our Web site: 
QuickLink si200 
www.computerworld.com 
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Sarbanes-Oxley’s Section 404, 


| which requires CEOs and 
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CFOs to certify that the finan- 


cial control procedures used by 


their companies are effective. 
Redmond, Wash.-based 
Concur Technologies Inc. lat- 


| er this month plans to intro- 


duce a similar package for 


Provide Only Limited Help 


documenting how its expense 
management software func- 
tions in order to comply with 
Section 404. The new technol- 
ogy will be included as part of 
the annual maintenance fee 
paid by users of the company’s 


| software, said Christopher 


Juneau, Concur’s senior direc- 


| tor of product management 


Customized software creat- 
ed by big accounting and IT 
consulting firms is among the 
few options available to users 
seeking a full complement of 
tools for automating compli- 
ance with Sarbanes-Oxley. 
Thomas Murphy, CIO at Royal 

Sarbanes Apps, page 49 
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Record Scalability Benchmark 
Achieved with 30,000 Concurrent Users 


Major Test Component 


Application Siebel 7 Application Suite 


Microsoft SQL Server 2000 Enterprise Edition 64-bit 


Operating System Microsoft Windows Server 2003, Datacenter Edition 


Unisys ES7000 Orion 130, ES2041, ES2081 “ 





Facts speak volumes, to aa tel ears 


can handle the demands of your enterprise, 





Sreater performance and Scalability of Microsoft® SQL see 2000 


goto microsoft.com/sql/siebel Software for the Eee sit eet Microsoft 
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How to Cut Your Data Losses 

In the Technology section: Data recovery specialist 
Dan Gardner of Renew Data Corp. offers tips on 
how to avoid losing data and what can be done 
when disasters happen. Page 34 
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Portal Powers GE Sales 


in the Technology section: By offering a single point of 
access to the company’s many databases and applica- 
tions, GE Power’s sales portal lets staffers spend less 
time with computers and more with customers. Page 31 
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Microsoft announces a certi- 
fication program for security 
professionals who specialize 

in Windows. 


SC0’s legal threat fails to de- 
ter users from adopting Linux. 
But the uncertainty could af- 
fect future plans. 


3Com readies low-cost Giga- 
bit Ethernet switches. 


Intel has turned off software 
used by its Centrino mobile 
chip set because of VPN 
client incompatibility issues. 


New tools promise to help 
administrators secure mobile 
devices. 


AT&T offers network services 
for managed storage users. 


Symantec upgrades its pcAny- 
where remote access software. 


The IRS’s new CIO — its 
former CFO — takes the reins 
of a tech upgrade project 
launched in 1998. 


Q&A: A Microsoft exec ex- 
plains the new benefits the 
vendor is offering its Software 
Assurance customers. 


Europe’s space agency plans 
to develop a GPS-like satellite- 
based navigation system. 


Nasdaq’s CIO wants to con- 
solidate the stock market’s 
IT systems. 


Deal with SAP calls for 
MySQL to take the lead in 
SAP DB development. 


Pe eereeeereeeessesseesseseses 
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The Op3D project at the University 
of Manchester lets doctors rehearse 
surgeries through a 3-D display. 


Sumitomo Mitsui Banking used a 
browser front end, middleware and 
Pee Aae eRe OULU RUC! 
US eae 


New York University expanded its 
Ce elM ele MCR UM ees ice 
OMe MOR TOR UT) Te T(t aoe 


At the Pacific Northwest Nationat 
Lab, a Linux supercomputer will help 
Ue l cre marl emcee oom 

India’s Oxford Bookstore used an 
Te eCR Cae tum CRi nie 
etme ere M area (eee cc el Rel 


TECHNOLOGY 


; 36 Security Manager’s Journal: 





MANAGEMENT — 


39 Buy! No, Build! Packaged 


Single Sign-on Stalls as 
Kazaa Gets the Boot. Numer- 
ic user names thwart a direc- 
tory integration project, but 
Mathias Thurman moves for- 
ward in blocking the use of 
file-swapping programs on 
the corporate network. 


software apps were once con- 
sidered the endgame, but now 
they’re the foundation for 
highly customized and com- 
plex information systems. 


: 41 Talking Long-Distance. Tele- 


phone job interviews are sav- 
ing companies time and mon- 
ey. We offer advice for job 
seekers on how to make the 
best impression. 


. 


OPINIONS 


8 On the Mark: Mark Hall 
learns that HP is readying an 
updated road map for Open- 
View and finds a NAS product 
with petabyte possibilities. 





20 Maryfran Johnson is sur- 
prised to learn that one of 
the thorniest issues IT execs 
face is complying with the 
Sarbanes-Oxley Act of 2002. 
Will it be Y2k all over again? 


20 Pimm Fox objects to Micro- 
soft’s questionable — but 
legal — tactics as it tries to 
undermine Linux and other 
competitors. 


Thornton May gives Harvard 
Business School a failing grade 
for focusing on the present at 
the expense of the future. 


38 Paul A. Strassmann believes 
that Web services will change 
both IT and the power struc- 
tures within organizations. 


42 Jay Cline says adding a priva- 
cy seal from Truste or BBB- 
OnLine to your Web site can 
be a worthwhile investment. 
These logos may not come 
cheap, but they can boost 
consumer confidence. 


50 Frankly Speaking: Frank 
Hayes sorts out the mess The 
SCO Group has gotten itself 
into — and may never escape. 
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How Does Your IT 
Spending Stack Up? 


ROI: Use our new IT Spending Assessment 
tool and receive an instant benchmark report 
on how your company’s budget compares 
with those of similar-size organizations. 


@ QuickLink 23270 
The True Costs of Software 


MANAGEMENT: “Free” software isn’t really 
free, of course. And a simple TCO analysis 
isn’t enough to evaluate it, says Alan Mac- 
Cormack, an assistant professor of business 
administration at Harvard. @QuickLink 38745 


NEWS: What's the latest on the financial re- 
porting act? What is its IT impact? Check 
out Computerworld’s continuing coverage. 


© QuickLink a3250 
Where Does Your Time Go? 


DEVELOPMENT: “Busy people get the most 
done,” a developer says. But do they? A lot 
depends on the kind of “busy” you are, writes 
columnist Esther Derby. @QuickLink 38786 


Hands On: Getting Macs and PCs 
To Play Well Together 


IT professional and technology writer Ryan 
Faas takes a look at how organizations can 
tackle the Mac/PC challenge in two basic 
ways: server-side and client-side software. 


@ QuickLink 38729 


ONLINE 
DEPARTMENTS 


Breaking News 
© QuickLink 21510 


Newsletter Subscriptions 
© QuickLink a1430 
Knowledge Centers 

© QuickLink a2570 
The Online Store 

@ QuickLink a2420 


What's a QuickLink? 
On some pages in 
this issue, you'll see 

@ Quicklink code pointing 

to additional, related con- 

tent on our Web site. Just 
enter that code into our 
you'll see at the top of 
each page on our site. 
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AT DEADLINE 


Microsoft Settles 
Lawsuit With AOL 


Microsoft Corp. said it will pay 
AOL Time Warner Inc. $750 mil- 
lion to settle an antitrust suit filed 
on behalf of Netscape Communi- 
cations Corp. in January 2002. 
Microsoft also will give AOL Time 
Warner's America Online Inc. divi- 
sion a royalty-free, seven-year li- 
cense to use Internet Explorer 
with its client software. The suit 
claimed that Microsoft illegally 
harmed Netscape’s Web browser 
business. 


J.D. Edwards 
Reports Q2 Loss 


Business applications vendor J.D. 
Edwards & Co. dropped back into 
the red during its second quarter, 
reporting a loss of $393,000 for | 
the three-month period that end- 
ed April 30. Revenue totaled 
$203.5 million, down 9% from 
$223.6 million a year ago. CEO 
Bob Dutkowsky said Denver- 
based J.D. Edwards was affected 
by smaller transactions as users 
scaled back purchases. 


HP, Ericsson Set 
To Finalize IT Deal 


Hewlett-Packard Co. and LM 
Ericsson Telephone Co. this week 
are expected to announce that 
they have finalized an IT out- 
sourcing deal valued at more than 
$1 billion. Stockholm-based Erics- 
son in April said that it had signed 
an agreement in principle to hand 
over management of its IT opera- 
tions to HP, with a formal deal ex- 
pected by midyear. 


Short Takes 


In other HP news, the company 
this week plans to release a low- 
end network-attached storage de- 
vice priced at $2,999, which is 
$5,000 less than its existing 
entry-level product. . . . CISCO 
SYSTEMS INC. this week is due to 
announce upgraded software for 
managing corporate wireless LAN 
installations. | 
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Exams tailored for IT professionals who 
specialize in security for Windows 





BY CAROL SLIWA 
ICROSOFT CORP. 
tomorrow will an- 
nounce its first 
set of certifica- 
tion credentials for IT admin- 
istrators and engineers who 
specialize in security in a 
Windows environment. 

Dan Truax, director of busi- 
ness and product strategy for 
training and certification at 
Microsoft, noted that the com- 
pany has offered se- 
curity courses for 
years. But he said 
Microsoft decided 
to take the extra 
step of creating a 
formal credential in 
recognition of the 
number of cus- 
tomers that now specialize in 
that type of job. 

The announcement of the 
new certifications is sched- 
uled to be made during a 
keynote address by Scott 
Charney, Microsoft’s chief se- 
curity strategist, at the compa- 
ny’s TechEd 2003 conference 
in Dallas. 

The more rigorous of the 
two certifications being intro- 
duced is the Microsoft Certi- 


Server 2003: 





ALSO AT TECHED 
Microsoft will announce 


the availability of Release 
Candidate 1 of Exchange 


@ QuickLink 38824 
www.computerworld.com 





fied Systems Engineer 
(MCSE): Security on Mi- 
crosoft Windows 2000. To 
achieve that status, an engi- 
neer must pass six core exams 
and demonstrate a “security 
specialty” by taking a test on 
Microsoft Internet Security 


| and Acceleration (ISA) Server 


2000 or an exam administered 
by the Computing Technology 
Industry Association, better 
known as CompTIA. 

The require- 
ments are essen- 
tially the same as 
for an ordinary 
MCSE certifica- 
tion, except the 
security candidate 
has to take the 
core security de- 
sign exam and a security im- 
plementation exam that Mi- 
crosoft introduced in January, 
along with the ISA Server or 
CompTIA exam. 

The other new certification 
— Microsoft Certified Sys- 
tems Administrator (MCSA): 
Security on Microsoft Win- 
dows 2000 — requires the 
four exams needed for a typi- 
cal MCSA certification, plus 
one additional exam. One core 





Microsoft to Introduce 
Security Certifications 


NEW CERTIFICATIONS 


Microsoft Certified Systems 
Administrator: Security on 
Windows 2000 


@ Core exams: Client operating 
system (1), networking system (2), 
security implementation (1) 


= Security specialty: One re- 
quired (options: installing, configur- 
ing and administering Microsoft 
Internet Security and Acceleration 
Server 2000, Enterprise Edition or 
CompTIA Security+) 


Microsoft Certified Systems 
Engineer: Security on 
Windows 2009 

@ Core exams: Client operating 
system (1), networking system (3), 
security design (1), security imple- 
mentation (1) 


® Security specialty: One 
required (same options as above) 


SOURCE. MICROSOFT CORP 


exam on the client operating 
system and two on networking 
systems are mandated along 
with the security implementa- 
tion exam and either the ISA 
Server or CompTIA exam. 
Certifications aren’t yet 
available for Windows Server 
2003, but they’re expected to 
become available later this 
year, according to Truax. 
Truax said Microsoft was 
first approached last summer 
about creating a special secu- 


Microsoft Set to Ship NAS Upgrade to Storage Vendors 


At TechEd, Microsoft today plans 
to announce that it will release 
the third generation of its net- 
work-attached storage (NAS) 
software to hardware vendors 
this month. Added features are 
designed to let the Windows- 
based technology be used in a 
wider range of storage devices. 
The Windows Powered NAS 
upgrade was detailed as part of 
Microsoft's Windows Server 
2003 rollout in April and includes 


new Virtual Shadow Copy Ser- 
vice and Virtual Disk Service 
middleware components, plus a 
software driver that supports the 
Internet SCSI storage intercon- 
nect standard. 

Claude Lorenson, product 
manager for Microsoft's enter- 
prise storage division, said the 
Server Appliance Kit 2003 re- 
lease of the NAS software should 
start appearing in storage de- 
vices by September. 


Analysts said Microsoft's latest 
release will put more pressure on 
NAS software rivals like Network 
Appliance Inc. in Sunnyvale, 
Calif., and Snap Appliance Inc. in 
San Jose. NetApp and Snap are 
among the holdout storage ven- 
dors that have yet to team up 
with Microsoft, which in late April 
announced a deal under which 
EMC Corp. will sell Windows 
Powered NAS on its Clariion 
midrange arrays. 





www.computerworld.com 


| rity credential. Customers and 


partners subsequently advised 
the company not to create cre- 
dentials similar to any that al- 
ready exist in the industry, but 
rather to focus on offering a 
certification specific to the 
Microsoft software environ- 
ment, he said. “Our goal was 
to complement what exists in 
the industry, not to compete 
with it,” Truax said. 

How important the new cer- 
tifications will be to IT shops 
is unclear. Charles Emery, se- 
nior vice president and CIO at 
Horizon Blue Cross Blue 
Shield of New Jersey in 
Newark, said he views the new 
Microsoft programs as posi- 
tive for the industry. But he 
also noted that Horizon Blue 
Cross Blue Shield doesn’t use 
certifications as hiring crite- 
ria, because it has often found 
that certification holders have 
no practical experience. 

Mike Lines, an Indianapolis- 
based manager of technical in- 
tegration at Bell Industries 
Tech.logix Group, said that as 
a provider of outsourced IT 
services, his company requires 
all of its engineers to carry the 
MCSE credential. Lines said 
he definitely will have a cou- 
ple of engineers take the new 
security certification exams. 

But one certified Microsoft 
trainer, who asked not to be 
identified, said it’s difficult for 
any vendor to develop a secu- 
rity curriculum for its own 
products. He said third par- 
ties, such as the SANS Insti- 
tute, tend to take a more criti- 
cal and thorough approach. DB 


According to Pushan Rinnen, 
an analyst at Gartner Inc. in 
Stamford, Conn., Microsoft more 
than doubled its NAS revenue 
last year and had a 15% share of 
the $1.4 billion market. In com- 
parison, NetApp had a 37% mar- 
ket share, Rinnen said. 

Despite that gap, Microsoft is 
starting to nip at NetApp’s heels, 
said Dennis Martin, an analyst at 
Evaluator Group Inc. in Engle- 
wood, Colo. “It’s just the fact that 
they're making it easy for OEMs 
to sell this stuff,” he said. 

- Lucas Mearian 
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Legal Threat Won’t Deter Linux 
Adoption for Now, Users Say 


But uncertainty 
raises concerns 
about future plans 


BY PATRICK THIBODEAU 

The SCO Group Inc.'s claim 
that the Linux kernel contains 
large blocks of illegal code isn’t 
stalling corporate adoption of 
the open-source operating sys- 
tem. But the case is clearly get- 
ting the attention of many IT 
managers, and some said the 
uncertainty it’s creating could 
have an impact on fu- 


ture Linux imple- 


mentation plans. 
sco 


Lindon, Utah- 
based SCO, 
which in March 
filed a $1 billion 
lawsuit against 
IBM alleging mis- 
appropriation of 
trade secrets and unfair com- 
petition [QuickLink 36901], 
now claims that sections of 
the Linux kernel — in chunks 
of code as large as 15 lines — 
were copied from its Unix 
System V operating system. In 
May, the company sent letters 
to all Fortune 1,000 and Global 
500 companies with a vague 
warning that using Linux could 
put them at legal risk [Quick- 
Link 38514]. But so far SCO’s 
actions don’t appear to be af- 
fecting corporate rollouts. 

“T have not heard of the law- 
suit substantially altering peo- 
ple’s plans for Linux deploy- 
ment,” said Jim Battan, presi- 
dent of the Portland, Ore., 
chapter of the Chicago-based 
Society for Information Man- 
agement. “It’s something most 
companies are observing 
closely but aren’t too worried 
that there will be substantial 
end-user complications.” 
PROVE IT 
Novell challenges SCO to prove its 
Linux allegations 
QuickLink 38754 


Full coverage: Additional stories on 
this subject are available at 


Qe QuickLink a3260 
www.computerworld.com 


Duke Energy Corp. in Char- 
lotte, N.C., for instance, is pro- 
ceeding apace with its Linux 

| adoption, said Bruce Ander- 
| son, the company’s general 

| manager of IT strategies and 
| technical architecture. Like a 
| lot of large companies, Duke 
| Energy has Linux on limited- 
| function appliance devices. 

Dan Agronow, vice presi- 

|; dent of technology at Weath- 
er.com and Weather Channel 
Enterprises Inc. in Atlanta, 
said SCO’s actions raise more 
questions than answers. 
“It’s having no effect at 
all” on Linux use at 
his company, said 
Agronow. “There’s 
too much uncer- 
tainty.” 

The uncer- 
tainty and skep- 
ticism over 

SCO’s claim stem from a lack 
| of proof. SCO said that begin- 
| ning next week, it will show its 
source code to analysts who 
agree to sign a nondisclosure 
agreement. But it may have 
trouble getting takers. 

Giga Information Group 
Inc. analyst Stacey Quandt 
| said she is wary that signing a 
nondisclosure agreement 
could prevent her from dis- 
cussing the legitimacy of SCO’s 
claims. She called the offer a 
PR stunt. “[SCO] should tell 
everybody what they have,” 
said Quandt, who has advised 
clients of Cambridge, Mass.- 
based Giga to continue with 
| their Linux adoptions. 

George Weiss, an analyst at 
Gartner Inc. who recently rec- 
| ommended minimizing Linux 
adoption in complex, mission- 
critical systems until the mer- 
its of SCO’s claims or any 
judgments are clear, has also 
been talking to SCO. He said 
he’s leaning against accepting 
SCO’s offer, noting that SCO is 
making its case based on 
“vague inferences” and is ask- 
ing analysts to do the same. 
“It’s stepping right into their 
shoes,” he said. 

Regardless of the uncertain- 








ties, legal experts said users 
have to pay attention. “The 
fact that you ignored it could 
potentially cause your dam- 
ages to increase substantially,” 
said Brian E. Ferguson, an at- 
torney in McDermott, Will & 
Emery’s Washington office. 
“The ostrich’s head-in-the- 
sand approach is definitely 
not an option.” 

Until the case is resolved, 
Peter Mojica, a vice president 


| at AXS-One Inc., a Rutherford, 


NJ., supply chain software 
vendor, said he expects com- 
panies will at least consider 


| the legal challenge before pro- 
| ceeding with Linux adoptions. 


SCO Official 


The SCO Group claims that be- 
ginning next week, it will show 
analysts where the Unix code it 
owns has been illegally copied 
into the Linux kernel. In an inter- 
view with Computerworld’s 
Patrick Thibodeau, Chris Son- 
tag, senior vice president and 
general manager of SCOsource, 
the division of SCO Group that’s 
in charge of protecting the com- 
pany's intellectual property, dis- 
cussed SCO’s position. 


Why should Linux 

users take your claim 
seriously? Think about 

if | was the CIO of a 

company and I'm going 

to be running my busi- 

ness on an operating 

system that has an intel- 

lectual property founda- 

tion that, by almost 

everyone's admission, is 

built on quicksand. 

There is no mechanism in Linux 
to ensure [the legality of] that 
intellectual property - the source 
code being contributed by vari- 
ous people. 


Your recent letter to 1,500 
user companies outlining your 
claim was vague. What is it 
that you want from these 


Deas Fortune 1000 Company: 


COMPUTERWORLD June 2, 2003 


SCO holds the rights to the UNIX operating system software originally licensed by 
AT&T to approximately 6,000 companies and institutions worldwide (the “UNIX 
Licenses”). The vast majority of UNIX software used in enterprise applications today is 
a derivative work of the software origmally distributed under our UNIX Licenses. Like 
you, we have an obligation to our shareholders to protect our uitellectual property and 


other valuable nghts. 


In recent years, a UNIX-like operating system has emerged and has been distributed i 
the enterprise marketplace by various software vendors. ~ big system is called Lin 


believe that Linux is, in material part, an unauthorr 


As you may know, the devel « 
development process 
built by care 
___ “It will defi- 
nitely chill it,” said 
| Mojica, although he noted that 
| Linux will still be widely 
adopted in the long run. “It is 
| kind of hard to stop the open- 
| source train,” he said. 
Barry Brunetto, director of 
| information systems at Port- 


land, Ore.-based sporting 
goods and power equipment 
manufacturer Blount Interna- 
tional Inc., said SCO’s legal 
claims may be a factor in any 
strategic Linux decision his 
company makes. “It does play 
into our mind,” he said. D 


Reporter Todd R. Weiss 
contributed to this story. 


Defends Linux Attack 


companies? The one thing that 
we specifically want from those 
1,500 companies that we direct- 
ly sent those letters to is for 
them to not take our word on the 
warning that we sent . . . but to 
seek an opinion of their legal 
counsel as to the issues that we 
raised. 


Should companies remove 
Linux from their systems? 
We're not making any specific 
recommendations at this time 


Are you considering su- 
ing Linux users that 
you notified? Anything is 
always a possibility. If you 
are going to enforce your 
contracts, claims and in- 
tellectual property, you 
have to be able to go to 
ultimately the endpoint of 
infringement. 


How many lines of code in the 
Linux kernel are a direct 
copyright violation? It's very 
extensive. It is many different 
sections of code ranging from 
five to 10 to 15 lines of code in 
multiple places that are of issue, 
up to large blocks of code that 
have been inappropriately 
copied into Linux in violation of 


our source-code licensing con- 
tract. That's in the kernel itself, 
So it is significant. It is not a line 
or two here or there. It was quite 
a surprise for us. 


Why did Microsoft decide to 
get a license from you? 
Completely unrelated. Microsoft 
has been adding more and more 
Unix compatibility and Unix 
interoperability into their prod- 
ucts. We got in contact with 
them early this year to let them 
know that we had concerns 
about if they had all the appro- 
priate intellectual property nec- 
essary to be providing that Unix 
capability. 

We ended up in negotiations 
where they have licensed some 
of our Unix Systems V intellectu- 
al property from us for use in 
their Services for Unix products. 
... They recognized that it was 
important to have appropriate in- 
tellectual property licenses for 
the property they are using. 


Have you made a similar li- 
censing offer to the 1,500 
companies that received your 
letter? We have no specific pro- 
gram or solution for solving this 
Linux intellectual property prob- 
lem right now. 
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BRIEFS 


Microsoft Forms 
Security Team... 


Microsoft Corp.'s IT security 
business unithassetupagroup | 
that will establish new software 
development processes and look 
at security issues across all its 
product lines. The Security Engi- 
neering Strategy team will have 
about 10 workers recruited from 
inside and outside Microsoft, 
said director Scott Lipner. The 
company needs “to do a more 
coherent job” of trying to limit 
security flaws, he added. 


... And Warns of 
Software Flaws 


Microsoft also issued two bul- 
letins warning of vulnerabilities 
in its Web server and Window 
Media Services software. It re- 
leased patches designed to fix 
the flaws, none of which were 
given a “critical” severity rating. 
in addition, Microsoft pulled from 
its Web site an updated imple- 
mentation of the IPsec security 
protocol for Windows XP after 
some users reported problems. 


Symantec, DISA 


NEWS 


MARK HALL #ON THE MARK 


HP to Update 


~ OpenView Road Map... 


... later this month, says Todd DeLaughter. He’s OpenView vice presi- 
dent at Hewlett-Packard Co., so he should know. But he’s a bit mum 
on the details, revealing only that Service Desk 4.5 will be bumped 

to Version 5.0 and include more automated problem-resolution capability. 
According to DeLaughter, “We view service management as not the 
endgame. We want network management to evolve into adaptive ser- 
vices.” (That’s HP’s phrase for utility computing.) He adds that the 


industry is moving toward automating 
problem resolution with the help of IT 
management systems like OpenView. 
“It’s a trust that builds over time,” he 
says. OpenView user Joe Madden, direc- 
tor of managed services for three data 
centers run by Consonus Inc. in Salt Lake 
City, has an interesting take on who 
trusts products like OpenView to identi- 
fy problems and fix them without human 
intervention. “System administrators and 
DBAs show more willingness to accept 
automation,” he observes. “Network guys 
are less inclined.” Why’s that? Madden 
thinks operating systems and databases 
suffer from persistent 
patching problems, which 
makes automatic patch 
services very desirable. 
Network problems tend 
to be intermittent, incon- 
sistent and, at times, just 
plain inexplicable, which 





Anew filtering tool, Chaperone 
a eile Rene em 
Va.-based Corn S are 
LLC, goes into beta-testing in 


Post Soft 


products manage unstructured data, de- 
spite the fact that 10 times as much corpo- 
rate information is stored in unstructured 
formats such as e-mails, Web pages and 
whatnot. Prabhakar Raghavan, chief 
technology officer at Verity Inc., grouses 
that if you look at market capitalizations 
(outstanding shares multiplied by share 
price) of database companies and com- 
pare them with the slew of search, docu- 
ment management and content manage- 
ment businesses, you'll see that the stock 
market prefers database vendors. (That’s 
probably because Google Inc. is still a 
private company.) But that may change in 
three to five years, he says, 
as unstructured data 
search tools become 
even more analytical and 
add advanced XML 
queries. Databases will 
be constrained in this 
area because of their 


www.computerworld.com 


to ship the 5.1 upgrade of its Ultraseek 
search engine, adding a new graphical 
user interface tool to lay out query re- 
sults and sprucing up its analytical func- 
tions. ® Once you find all the data you 
need, you’ll want to do something with it. 
The foiks at Somerville, Mass.-based 
Spotfire Inc. would appreciate it if you 
ran it through AnalysisBuilder, a new and 
free module available today in DecisionSite 
7.2, the company’s business-intelligence 
software. The tool makes it pretty simple 
for users to capture data from a variety of 
sources, annotate it and then share it 
with others via e-mail in an HTML for- 
mat with a single mouse click. ® Natural- 
ly, all that data has got to live somewhere, 
and it will increasingly reside in a stor- 
age-area network (SAN) or network- 
attached storage (NAS) environment. 
You'll have more options by month’s end, 
when Spinnaker Networks LLC in Pitts- 
burgh ships SpinServer 4100. The new 
NAS device can manage a single file as 
big as 22TB. (Or, slightly bigger than the size 
of a certain editor in chief’s internal memos.) 
And a six-node cluster of the 4100 can 
handle li petabytes of data. (Room for 
plenty of memos.) Marketing vice presi- 
dent Jeff Hornung displays a remarkable 
honesty in admitting that his young 
start-up “is behind companies with 
longer histories in terms of offering a 
complete solution.” But the 4100, whose 
little brother the 3300 shipped last year, 
already integrates into most SAN envi- 
ronments and works with Advanced 
Technology Attachment drives from 
Nexan Inc. The major drawback might 
be in backup applications. Right now, it 


two weeks and will ship by the 
makes human interven- 


Sign Security Deal 


Symantec Corp. announced 

a three-year deal to provide 

the U.S. Defense Information 
Systems Agency (DISA) with 
early-warning information about 
IT security threats and cyber- 
attacks. The data will complement 
other systems at DISA and will 
be used to formulate recommen- 
dations for protecting IT assets 
within the Pentagon, the Cuper- 
tino, Calif.-based company said. 


Short Takes 


DELL COMPUTER CORP. said 
that EASTMAN CHEMICAL CO. in 
Kingsport, Tenn., is buying about 
14,000 desktop and notebook 
PCs in a $16 million upgrade 
deal. . . . IBM announced a low- 
end Unix server that’s based on 
its Power4+ microprocessor, 
completing a shift of its systems 
to that chip. 





tion invaluable. ® If you 
invest in IT vendors, you 
may have noticed that 
database companies are 
prized by Wall Street 
more than firms whose 


end of July. The product filters 
out spam and runs keyword 
PTF LeM MIRON LCi Rte Url BC) 
prevent company secrets from 
finding their way into the wrong 
hands. Pricing hasn’t been set. 


rigid schemas. Verity 
isn’t waiting until then to 
make improvements to 
its products. At the end 
of this month, the Sunny- 
vale, Calif.-based search 
technology vendor plans 





works only with backup software from 
Veritas Software Corp. Hornung says 
you can expect to see compatibility soon 
with backup products from Legato Sys- 
tems Inc., Tivoli Software and Computer 
Associates International Inc. All this for 
less than $70,000. d 





3Com Readies Low-Cost Gigabit Switches 


BY MATT HAMBLEN 
3Com Corp. today plans to ex- 
pand its line of switches for 
small and medium-size busi- 
nesses by announcing five 
Gigabit Ethernet devices. 

The new switches range in 
price from $149 for a model 
with eight ports — only one of 
which is capable of Gigabit 
Ethernet performance — to 
$3,495 for a system with 24 
Gigabit Ethernet ports, said 
Robert Winch, director of 
product management at Santa 





Clara, Calif.-based 3Com. Two 
of the switches are desktop 
models, and the other three 
are rack-mountable. All five 
are due this summer. 

Kirk McClanahan, network 
administrator at CSA Travel 
Protection in San Diego, said 
the insurance provider plans 
to add two switches to its net- 
work to move information be- 
tween 175 desktop PCs and its 
data storage devices. 

Data-transfer workloads on 
CSA's network are expected to 





increase because of corporate 
growth, McClanahan said. He 
added that CSA “needed to in- 
crease the available speed 
without spending a lot.” 
3Com is one of several lead- 
ing vendors in the market for 
unmanaged switches, which 
operate without relying on the 
Simple Network Management 
Protocol and functions that 
typically help IT administra- 
tors monitor network access 
and usage, said Joshua John- 
son, an analyst at Synergy Re- 





search Group Inc. in Phoenix. 

“Compared to many seg- 
ments of networking, this is 
one area that’s growing,” John- 
son said, adding that annual 
sales of unmanaged switches 
total about $500 million. Other 
top vendors include Dell Com- 
puter Corp., D-Link Systems 
Inc., Netgear Inc. and Linksys 
Group Inc. 

Sales of switches supporting 
Gigabit Ethernet data rates 
should also see growth “be- 
cause the difference in price 
over standard Ethernet is min- 
imal,” said Zeus Kerravala, an 
analyst at The Yankee Group. B 








anc Te 2e: 
BRINGS IT ALL 
TOGETHER. 


Imagine giving 

your applications 
optimal performance 
OM ele a lee 


Thanks to the blade server platform, you've 
reduced everything—server size, space, cables, 
management overhead and most importantly, 
costs. But then you realize that even when 
consolidated, the new server platform still has 
to meet the same demands: it has to be highly 
available, secure, scalable and completely 
reliable in its performance. 


How do you meet those démands without 
sacrificing all you've just gained? F5’s BIG-IP® 
Blade Controller software provides traffic 
management that virtualizes and load balances 
the blade server environment. Now you can pool 
blades and concentrate their power, route traffic 
to those that are performing well, and manage 
them as a single entity. And with BIG-IP Blade 
Controller loaded directly onto blade servers, 
you're guaranteed to achieve the high 
availability performance it takes to reliably 
deliver applications. 


Give your imagination free reign and your 
bottom line room to grow. 

Visit www.f5.com/bccw to learn more and 
experience a flash:demo. Or call 800-916-7185. 
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System Crashes Linked to 
Centrino, VPN Client Glitch 


New Intel mobile chip set incompatible 
with Nortel's software, possibly others 


BY BOB BREWIN 
NTEL CorRP. last week 
turned off software used 
by its Centrino mobile 
chip set because 

of incompatibility 

problems that can 
cause some notebook and lap- 
top PCs to be hit by blue- 
screen system crashes if users 
try to run virtual private net- 
work (VPN) client software. | 
The problems came to light | 
after Nortel Networks Ltd. | 
| 


| 
| 
| 


acknowledged that the operat- 
ing system on Centrino-based 


CTY 


| to any VPN client package. 


PCs can stop functioning 
when Nortel’s Contivity VPN 
software is installed. A posting 
on Intel’s Web site indicates 
that the suspected 
cause of the system 
crashes could apply 


Mike Schexnaydre, a soft- 
ware engineer at Nortel, said 
the Brampton, Ontario-based 
company has determined that 
the conflicts between Contivi- 
ty and Centrino stem from the 
use of an adapter-switching 
feature in the Intel-developed 


Tools Help Administrators 
Secure Mobile-Device Data 


Ability to control 
network access a 
growing concern 
BY JAIKUMAR VIJAYAN 

The mushrooming use of mo- 
bile devices such as PDAs and 
smart phones is creating a 
growing security problem, and 
companies have few tools to 
deal with it. 

But that’s changing. This 
week’s Gartner IT Security 
Summit in Washington will 
feature products from two 
vendors that are intended to 
help companies secure critical 
data on mobile devices. 

One of the vendors is 
Credant Technologies Inc., a 
Dallas-based company that’s 
partly funded by Intel Corp. 
Credant’s Mobile Guardian 
software lets companies cen- 
trally manage security-policy 
administration and on-device 
policy enforcement, according 
to the company. With it, admin- 
istrators will be able to track 
and control mobile device us- 
age on their networks, as well 
as protect the data stored on 





such devices via encryption 
and tight access control. 

The other vendor is Balti- 
more-based Bluefire Security 
Technologies Inc. Its Mobile 
Firewall Plus technology fea- 
tures an on-device firewall 
that protects data on the sys- 
tem and provides a logging 
and alerting service that lets 
administrators track device 
usage and system compromis- 
es, company officials said. 


| Red Flag 


Such tools are aimed at ad- 
dressing growing security 
concerns related to the use of 
nonsecure mobile devices on 
enterprise networks, said Sally 
Hudson, an analyst at IDC in 
Framingham, Mass. 

As users increasingly move 
to sync mobile devices with 
their office systems, corporate 
information may be getting 
downloaded to those devices 
with little or no protection. 
“Enterprises are waking up to 


| the fact that it is important to 
| monitor and control this flow,” 
| Hudson said. 


The 22-hospital Banner 








software used to manage wire- 
less LAN setup profiles and 
other functions on PCs. 

The adapter-switching com- 
ponent of Intel’s PROSet soft- 
ware lets end users automati- 
cally switch from wired to 
wireless connections, Schex- 
naydre said. But a work- 
around developed by Nortel 
requires IT departments to 
uninstall the PROSet drivers, 
according to a technical bul- 
letin that the company re- 
leased May 14. 


Big Problem, No Solution 


Jonathan Jordan, a LAN engi- 
neer at a large textile company 
in South Carolina, is experi- 


Health system in Phoenix is 
testing Credant’s software to 
determine whether it can pro- 
tect patient health information 
stored on mobile devices. 
“There’s a lot of data that’s 
being put on these devices,” 
said Dave Jahne, a senior secu- 
rity analyst at Banner. “Since 
the HIPAA regulations came 


Credant Mobile 
Guardian 


® An on-device policy-enforce- 
ment agent that encrypts and 
controls access to data on the 
mobile devices. 


# A “gatekeeper” agent that's 
installed on all systems that a mo- 
bile device can synchronize with. 


= A centralized management, 
auditing and reporting component. 


Bluefire Mobile 
Firewall Plus 


® Encryption of data and enforce- 
ment of on-device passwords to 
access data. 


® A device-level manager for 
alerting administrators of 
changes in settings and files. 


Seco eeeeesesesereeseessees 


# An enterprise manager for cen- 
tralized administration. 


| encing firsthand the incom- 
patibility between Centrino 
and Nortel’s VPN software. 
Jordan said he ordered “hun- 
dreds” of Centrino-based lap- 
tops from Dell Computer 

| Corp., only to discover that in- 
stalling the Contivity client 
“causes the PC to blue-screen 
upon reboot.” 

He added that he has worked 
on the problem with Dell and 
Nortel for more than a month, 
but the vendors still don’t have 
a viable solution. Nortel’s 
work-around disables useful 
functions in PROSet, Jordan 
said, and unless the problem is 
resolved, his company “may 
have to move away from the 
Intel Centrino chip set.” 

Intel spokesman Daniel 
Francisco confirmed that the 
incompatibility issue involves 
the adapter-switching feature 
but said that Intel thinks most 
Centrino-based systems are al- 


out, we are looking for ways to 
secure that data.” 

The expectation is that 
Credant’s technology will al- 
low Banner to impose and en- 
force strict security policies 
related to the use of such de- 
vices and the data stored on 
them, Jahne said. 

Despite the promised bene- 
fits, these products aren’t 
faultless. The large size of the 
Credant agent software in- 
stalled on mobile devices 
could be a problem for some 
users, according to Jahne. 
Meanwhile, Bluefire acknowl- 
edges that its technology can 
do little to detect and stop 
unauthorized mobile devices 
from logging onto networks. 

Even so, user concerns will 
fuel increasing demand for 
mobile-security products such 
as firewalls, encryption tech- 
nology and tools for intrusion 
detection, authentication, au- 


according to Hudson. IDC ex- 
pects the market for these 
products to grow 71% annually, 
from $84.5 million in 2002 to 
over $1.2 billion in 2007. 

Other vendors in this small 
but growing market include 
Pointsec Mobile Technologies 
AB in Stockholm and F-Secure 
Corp. in Helsinki, Finland. B 





thorization and access control, | 
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The mobile chip technology 
currently supports WLAN 
access only via the 802.11b 
standard. 


Intel now says it 
NTT Meiclm OCs Om UL mLLD Cr] 
OPM BER ltyaM ee BN) | 
support by the fourth quarter. 


ready being shipped with that 
functionality switched off. 

An advisory that’s posted on 
Intel’s Web site and dated Feb. 
26 — nearly two weeks prior 
to Centrino’s official launch 
on March 12 — says the 
adapter-switching feature 
“must be disabled when VPN 
client software is in use.” 

Seattle-based WatchGuard 
Technologies Inc. and San 
Jose-based Secure Computing 
Corp., two other vendors of 
VPN clients, said they’re in- 
vestigating whether there are 
any conflicts between Centri- 
no and the products they sell. 

The Centrino architecture, 
which has been widely adopt- 
ed by hardware vendors, in- 
cludes a Pentium-M mobile 
processor and a supporting 
chip set that helps manage 
power consumption, graphics 
cards and the Universal Serial 
Bus ports on PCs. 

Schexnaydre said the oper- 
ating system freezes appear to 
occur only on Centrino-based 
models that include an 855GM 
version of the onboard graph- 
ics and power management 
controller. PCs with Intel’s 
855PM chip set don’t appear to 
be affected, he added. 

Chris Kozup, an analyst at 
Meta Group Inc. in Stamford, 
Conn., said he finds the fact 
that Intel didn’t build plug- 
and-play VPN client support 
into Centrino “baffling.” But 
he noted that it illustrates the 
fact that vendors of mobile 
and wireless technology have 
done a poor job of addressing 
users’ security requirements. D 


GO ONLINE 
Get more information and resources at 
our Mobile & Wireless Knowledge Center: 


QuickLink k1000 
www.computerworld.com 





You trust that the ravages of 400 years have not weakened the base. 





You-trust the granite bases to support the 24-foot high Corinthian columns. 


You trust ndthing more than eight columns to sustain a 15,000-ton dome above your head. 





* 
Shouldn't you feel the same way about your digital infrastructure? 


VeriSign delivers critical infrastructure services that make the 


Internet and telecommunication networks more intelligent, 
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simple: to make you feel as confident in the digital world as you 
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AI&I Aims Network Services 
At Storage and Hosting Users 


Business-continuity offerings include 
data backup, remote server monitoring 





BY MATT HAMBLEN 
T&T CORP. last week 
announced two net- 
work services, one 
that connects corpo- 

rate systems to data backup 

sites and another that lets IT 
managers remotely monitor 
servers hosted by AT&T in its 
data centers. 

The StorageConnect Ser- 
vice and Direct Control offer- 
ings work with a variety of 
other services focused on 
business reliability. For exam- 
ple, StorageConnect can be 
combined with AT&T’s Ultra- 
vailable Storage Service, a 
partnership set up two years 
ago with Hopkinton, Mass.- 
based EMC Corp. to provide 
managed storage, said Bernie 
McElroy, vice president of 
business continuity and high- 
availability services at AT&T. 

The new services expand 
AT&T’s effort to move beyond 
its traditional role as a seller 
of network pipes, said Zeus 
Kerravala, an analyst at The 
Yankee Group in Boston. No 
other telecommunications 
carrier is offering as compre- 
hensive a set of business-con- 
tinuity services, he added. 


Corrections 

In our May 26 cover story, “Going 
for Broke,” the supplier of the in- 
ventory control and warehouse 
management system at Aviall inc. 
was mistakenly identified as Cat- 
alyst Manufacturing Services. 
The system is supplied by Cata- 
lyst International Inc. 


In our May 12 story, “Wading into 
IP Telephony,” the pricing model 
for Cisco Systems Inc.'s Call- 
Manager system was incorrectly 
reported. Each individual phone 
uses one CallManager port and 
user license, regardless of the 





According to McElroy, 
StorageConnect is an end- 
to-end managed connection 


| service, offering a network 


pipe provisioned with a stor- 
age networking protocol that 
connects a company’s primary 
data center to a backup loca- 
tion. Users can choose one of 
three service-level agreements 
depending on their data avail- 


| ability needs, and AT&T will 


set up the connections and 
offer consulting help. 
Atlanta-based Worldspan 
LP, which operates a comput- 
erized reservation system for 
the travel industry, has been 
using StorageConnect since 
April to link EMC Symmetrix 





storage arrays at a production 
data center with a backup IT 
facility. 

David Lauderdale, World- 
span’s chief technology offi- 
cer, said the company repli- 
cates up to 12TB of informa- 
tion once or twice a day be- 
tween the two data centers. 
Eventually, Worldspan expects 
to expand the amount of repli- 
cated data to 20TB, he added. 

The AT&T service replaced 





a laborious system of perform- 
ing nightly tape backups in the 
main data center, then ship- 
ping the tapes to a vault for 
archiving. “We had rooms full 
of tape drives and rooms full 
of people,” Lauderdale said. 
StorageConnect costs about 
the same as the tape backup 
system did, Lauderdale said. 
But, he added, “I’ve got a total- 
ly new, remote, state-of-the-art 
business-continuity infra- 


AT&T's StorageConnect Service 
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structure for the price of 1990 
tape technology.” 

Direct Control gives 
AT&T’s managed services 
customers the ability to re- 
motely perform systems 
administration functions on 
servers housed at its U.S.- 
based data centers. Using Web 
browsers, IT managers can 
handle tasks such as setting 
capacity-utilization thresholds 
and viewing real-time alarm 
notices, AT&T said. 


Luring Customers 

AT&T is using services like 
Direct Control to try to lure 
more customers into signing 
managed storage agreements 
or other IT deals involving its 
data centers, said Melanie 
Posey, an analyst at IDC in 
Framingham, Mass. 

“A couple of years ago, this 
wouldn’t have happened from 
a [network] services provider,” 
she said. “But they’re now say- 
ing they’ll be as flexible as 
they need to be to get your 
business.” D 





Symantec Upgrades pcAnywhere 


Remote Connectivity Software 


| New version ups 


speed, adds more 
flexible interface 


BY MATT HAMBLEN 
Symantec Corp. today plans to 
announce pcAnywhere 11.0, an 
upgraded release of its re- 
mote-access software that fea- 
tures performance improve- 


| ments and a revised user inter- 


face for IT help desk adminis- 
trators. 

The pcAnywhere technol- 
ogy, which was initially re- 
leased in 1986 as a connectivi- 
ty tool for remote users, has 
emerged in recent years as a 
help desk support tool. The 
software provides help desk 
workers with remote system 
control functions, including 
the ability to take over a PC in 
the field and transfer files or 
patches, said David Scott, a 
senior product manager at 
Symantec in Cupertino, Calif. 





The new version can trans- 
fer needed files in the back- 
ground while IT administra- 
tors continue with other work, 
Scott said. He added that the 
revamped user interface looks 
more like Windows XP and of- 


| fers increased configuration 


flexibility, making it possible 
to reduce the size and number 
of tool bars and other features. 
The Burlington Northern 
and Santa Fe Railway Co. 
(BNSF) in Fort Worth, Texas, 
has about 250 pcAnywhere 
users and is beta-testing the 
11.0 release, said Brian Cook, 
a field service engineer at 
Wabtec Corp. Cook works at 
BNSF under an IT services 
contract between the railway 
company and Wilmerding, 
Pa.-based Wabtec. The up- 
graded software provides 
faster remote connections and 
better response-time perfor- 
mance than existing versions 
of pcAnywhere, and it has a 





pcAnywhere 11.0 


NEW FEATURES 

@ Supports RSA Security Inc.’s 
SecurlD two-factor user authen- 
tication technology. 

® Allows help desk personnel to 
send a thin-host version of 
pcAnywhere to PCs so they can 
remotely install the software. 


@ Includes file-transfer functions 
for sending software drivers 
and patches to PCs as a back- 
ground process. 


PRICING AND AVAILABILITY 
® Starts at $200 per seat; due 
for release this month. 


better look and feel, he said. 
One big benefit of using 

pcAnywhere is that it lets help 
desk staffers take control of 
PCs so they can show users 
how proprietary BNSF appli- 
cations work, Cook said. And 
if a user’s system won’t start, 





pcAnywhere can be used to 
access a fail-over copy of his 
data at a backup site in Tope- 
ka, Kan., and restore the PC. 

“T have no qualms with this 
product,” Cook said. “If they 
raised the price, people would 
still buy it.” 

Framingham, Mass.-based 
IDC recently reported that 
pcAnywhere commands more 
than 50% of the global market 
for remote systems control 
software, outpacing products 
from Symantec’s four major 
competitors: Tivoli Software, 
Computer Associates Interna- 
tional Inc., LANDesk Software 
Ltd. and Danware Data A/S. 

“The remote-control market 
is very mature, so products are 
at a very high level of func- 
tionality,” said IDC analyst 
Stephen Drake. 

Products like pcAnywhere 
also face competition from the 
free remote-control capabili- 
ties that Microsoft Corp. has 
built into Windows XP, Drake 
added. The market for remote- 
control software will stay 
about level with last year’s 
sales of $288 million for sever- 
al more years, he predicted. D 
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lronic how it takes the cutting edge 
technology of 2003 to access the 
cutting edge technology of 1973. 


myEXTRA!™ Smart Connectors let you leverage your existing legacy data and logic. 


“Cutting edge” doesn’t cut it. You need products 
that do what they say they will do. This is what 
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information without changing host applications. 
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CSC Signs Two 
Outsourcing Deals 


Computer Sciences Corp. (CSC) 
announced a pair of big IT out- 
sourcing deals, including a 10- 
year, $735 million contract with 
Marconi Corp., a London-based 
telecommunications equipment 
maker. El! Segundo, Calif.-based 
CSC said it has also signed an 
outsourcing deal valued at $450 
million over 10 years with ISS 
A/S, a Copenhagen-based com- 
pany that provides facility clean- 
ing and landscaping services. 


Sprint Slows Down 
Network Rollout 


Sprint Corp. said it has begun 
converting its local phone net- 
work to packet-based switching 
technology made by Brampton, 
Ontario-based Nortel Networks 
Ltd. But the rollout schedule has 
been extended. The original plan 
called for the implementation to 
take eight years. Sprint now ex- 
pects it to take up to 12 years. 


3Com Says Q4 
Sales Below Plan 


3Com Corp. warned that it will 
report lower-than-expected rev- 
enue for its fourth quarter, which 
ended May 30. The Santa Clara, 
Calif.-based networking equip- 
ment vendor said revenue should 
range between $165 million and 
$175 million, well below its $245 
million third-quarter total. Enter- 
prise networking sales will drop 
by as much as 25% sequential- 
ly, 3Com said. 


Short Takes 


THE APACHE SOFTWARE FOUN- 
DATION released an update of its 
open-source Web server soft- 
ware that plugs a security hole in 
a module supporting the World 
Wide Web Distributed Authoring 
and Versioning protocol. . . . 
DEUTSCHE LUFTHANSA AG said 
it will install The Boeing Co.’s 
wireless Internet access technol- 
ogy on 80 long-haul jets. 
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| BY TODD R. WEISS 


HE U.S. Internal Rev- 
enue Service has 
named W. Todd 
Grams, its former 
chief financial officer, to serve 
as new CIO, ef- 
fective yesterday. 
IRS Commis- 
sioner Mark W. 
Everson appointed Grams late 
last month to oversee the 
agency’s continuing technolo- 
gy modernization, including 
the replacement of a decades- 
old master file system. Grams 


GOVERNMENT IT 


| had been the agency’s CFO 

since February 2001. 

The IRS has been pursuing 

a major technology revamp 
since 1998 as part of a 10-year 
| project authorized by Con- 
gress through the 
IRS Restructur- 
ing and Reform 
Act. According 
to a recent report from the 
General Accounting Office 
(GAO), the act aims to fix 
problems with computer sys- 
tems that didn’t work and tele- 
phone systems that often left 


New CIO Takes Reins 
Of IRS Tech U 


Agency appoints former CFO to post as 
| 10-year modernization effort continues 


erade 


| taxpayers unable to reach 
workers at the agency. 

In the past five years, Con- 
gress provided $1.35 billion for 
the agency’s Business Systems 
Modernization Project, which 
has resulted in improvements 
that have made it easier for 
taxpayers to reach the agency 
for assistance, according to 
the GAO report. 


E-filinag Expansion 

A key benefit of the technol- 
ogy upgrades has been the ex- 
pansion of electronic tax re- 
turn filings, up from 12 million 
returns in 1995 to 53 million 
this year. Electronic filing 
helps the agency cut costs by 


www.computerworld.com 


| reducing the need for labor- 
intensive reviews of paper tax 
returns, according to the GAO. 

One problem the new CIO 
will face is the continuing 
need for improved data and 
network security at the IRS, 
according to the GAO report. 

“Although IRS has made im- 
portant progress securing its 
systems, information security 
remains a challenge,” the GAO 
report stated. “Long-standing 
computer control weaknesses 
continue to threaten the confi- 
dentiality, integrity and avail- 
ability of sensitive systems 
and taxpayer data.” 

Grams replaces John C. 
Reece, who retired last month 
after serving as CIO since Feb- 
ruary 2001. Before joining the 
IRS, Grams worked for more 
than 20 years at the Depart- 
ment of Veterans Affairs and 
the Office of Management 
and Budget. He couldn’t be 
reached for comment. D 





Continued from page 1 


Data Privacy — 


regard to data privacy. We are 
trying to make sure we have a 
law that meets their minimum 


| requirements,” Karnik said. 


At the same time, a tougher 
data privacy law in India 
stands to benefit U.S compa- 


| nies that have hired Indian 


firms to process jobs involving 
personal data. 

“We see this as making it 
easier for us to do business 
there,” said Karen Allen, vice 
president of risk management 
at Exult Inc., a business process 


CHECKLIST 


Offshore Privacy 


privacy expecta- 
tions in the contract. 


Sym Cee Urls 
with applicable privacy laws. 


PUP a ecm Cire 
dling and access control mea- 
Seen nro 


that adequate secu- 
rity and business continuity 
measures are in place to 
protect data. 





outsourcer for Fortune 500 
companies that last week 
opened a data center in Murm- 
bai. The company is one ina 
growing number of U.S. cor- 
porations that process person- 
al information on U.S. individ- 
uals at offshore locations. 
Such information often in- 
cludes Social Security and dri- 
ver’s license numbers as well 
as confidential data such as in- 
dividuals’ employment or 
medical histories. 

Currently there are no U.S. 
laws that prohibit that data 
from being shipped to or ac- 
cessed from other countries. 
But companies are increasing- 
ly being required to comply 
with industry-specific and 
state laws such as the Health 
Insurance Portability and Ac- 
countability Act, the Gramm- 
Leach-Bliley Act and Califor- 
nia’s pending SB 1386 identity- 
protection law. U.S. companies 
must comply with those laws 
regardless of where the data is 
processed or stored, legal ex- 
perts said. 

“There are no significant 
differences [in] a company’s 
privacy obligations, [whether 
it’s] conducting an offshore 
arrangement [or] a domestic 
one,” said Christopher Ford, a 





partner at law firm Alston & 
Bird LLP in Washington. 

Consequently, it’s important 
for companies to consider a 
country’s data privacy laws 
when contracting with off- 
shore firms, said 
Greg Scheuman, 
chief technology 8 
officer at Mer- 
cury Insurance 
Group in Brea, 
Calif. 

The need to 
comply with 
Gramm-Leach- 
Bliley and Cali- 
fornia’s SB 1386, 
which goes into 
effect July 1, has made privacy 
standards at Mercury “very 
significantly different from 
even a year ago,” Scheuman 
| said. India’s initiative is there- 
fore a positive one for Mercury, 
which outsources some devel- 
opment and maintenance work 
there, he said. 

Companies need to ascer- 
tain what measures an off- 
| shore service provider has 
taken to ensure data privacy, 
Scheuman added. That means 
reviewing the providers’ data 
handling and access control 
policies, disaster recovery and 
business continuity processes, 





We see 
this as 
making it easier 
for us to do busi- 
ness [in India]. 


KAREN ALLEN, 
VICE PRESIDENT OF RISK 
MANAGEMENT, EXULT INC 


and employee screening prac- 
tices, he said. 

It also pays to familiarize 
/ employees in offshore loca- 
tions with U.S. data privacy 
| practices and laws, Allen said. 
Exult, for in- 
stance, has a data 
privacy certifica- 
tion program for 
offshore employ- 
ees. The compa- 
ny also ensures 
that no confiden- 
tial data is sent 
overseas. In- 
stead, the data is 
hosted on U.S.- 
based systems 
and accessed in a closely moni- 
tored process. Systems that are 
used to access the data have 
some functions disabled to 
prevent unauthorized copying 
or downloading of the data, 
Allen said. 

“The focus of a U.S.-based 
company should be to look 
closely at the terms of their 
contract with outsourcers and 
insist that terms be imposed 
for very strong control over 
personal information,” said 
Donald Harris, president of 
HR Privacy Solutions Ltd., a 
New York-based identity man- 
agement consultancy. P 
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Microsoft 


tomer, who asked not to be 
identified. 

Bill Landefeld, vice presi- 
dent of worldwide licensing 
and pricing at Microsoft, said 
the additional benefits brought 
to Software Assurance are the 
direct result of feedback the 
company has collected from 
more than 2,000 customers 
during the past year. 

Several IT managers last 
week said they expect the en- 
hancements to be useful for 
their companies — especially 
the free access to online train- 
ing modules, business-hour 
telephone and Web support 
for enterprise edition server 
software, and home-use rights 
to the same version of Micro- 
soft Office that employees 
have at work. Benefits vary 
depending on the type of 
agreement purchased. 

“It was a nice surprise — 
Christmas in May,” said Les 
McCarter, director of infra- 
structure and operations at 
Hawaiian Electric Co. in Hon- 
olulu, which is eligible for the 
full complement of new bene- 
fits as an Enterprise Agree- 
ment licensee of Microsoft 
desktop and server products. 

McCarter said the utility 
has paid for 100 to 200 work- 
at-home licenses in the past 


| 





and is currently exploring a 
virtual private network project 
that was going to require the 
purchase of licenses for home 
users. “This will mean a nice 
cost savings for us,” he said. 
But it’s too soon to tell 
whether the enhancements 
unveiled last week will sway 
more companies to buy Soft- 
ware Assurance or entice 
those with existing agree- 
ments to renew. Until now, the 
prime decision-making factor 
has been the frequency with 
which a company upgrades. 


Not for Everyone 

Jim Prevo, CIO at Green 
Mountain Coffee Inc. in Water- 
bury, Vt., said the new benefits 
are good, but they won’t 


| change his decision to forgo 


Software Assurance because 
it’s “just not worth the money.” 
He said his company balked at 
purchasing Software Assur- 
ance because it was too expen- 
sive and he didn’t want to feel 
pressured to upgrade more fre- 
quently than he would like. 
David Curran, manager of 
IT at CE Franklin Ltd. in Cal- 
gary, Alberta, said his compa- 
ny doesn’t upgrade quickly 
enough for Software Assur- 
ance to be of much value. But 
he said he might have consid- 


| ered it for server products to 


gain access to the free training 
and support, if the new bene- 
fits had been offered sooner. 
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Kurt Schlegel, an analyst at 
Meta Group Inc. in Stamford, 
Conn., predicted that free sup- 
port will lead more companies 
to buy Software Assurance for 
their servers. He added that 
the economics are attractive 
for users with upgrade cycles 
under four years. 

But Alvin Park, an analyst at 
Gartner Inc., said the value 
won't be obvious for every 
company. He said users will 
need to take stock of each new 
benefit Microsoft is building 
into Software Assurance and 
put a price tag on those bene- 
fits to determine whether it 
makes sense for them. 

One Software Assurance 
customer who also holds a 
Premier Support contract with 
Microsoft said he hopes the 
new support options being of- 
fered through Software Assur- 
ance will enable his company 
to reduce the number of Pre- 
mier Support hours it now 
purchases from the vendor. 
The customer, who asked not 
to be named, is the vice presi- 
dent of IT procurement at a 
multinational media conglom- 
erate. He said the company 
spends more than $100,000 
per year on Premier Support. 

He added that the company 
hasn’t done an analysis to see 
if Software Assurance has 
been worth it and hasn’t de- 
cided whether it will be re- 
newed. With the economy 


Software Assurance Changes Explained 


Microsoft said 
last week that 
expanded 
training, sup- 
port and man- 
agement bene- 
fits will be 
available as of 
September for 
companies 
that purchased Software Assur- 
ance agreements for upgrade 
rights to its products. Bill Lande- 
feld, vice president of worldwide 
licensing and pricing at Micro- 
soft, spoke with Computer- 
world's Carol Sliwa about the ad- 
ditional benefits. Excerpts from 
that interview follow: 


Under the Software Assurance 
program, customers pay an 
annual fee for upgrade rights 
to Microsoft products, but the 
upgrade cycle has been some- 
what slow for some products. 
Did that put pressure on you to 
add value to Software Assur- 
ance? There's always pressure 
on us to deliver for our customers. 
Did the rate of the upgrade cycle 
put more or less pressure on us? 

| would say no. . . . Really, what 
this is in response to is customer 
feedback after the Licensing 6.0 
rollout, in terms of what more they 
expect from a vendor like Micro- 
soft through a Software Assur- 
ance type of program. 


When you went out and talked 
to customers, did you ask 
them how they would like to 
see Software Assurance en- 
hanced? We work very closely 
with our research group, and we 
did a number of in-person sur- 
veys, a number of phone surveys 
and a number of Web surveys. It 
was quite comprehensive. And 
the surveys were different, based 
on the amount of time and the 
type of interaction we had. 

We asked our customers what 
they expect from a relationship 
with Microsoft, what they expect 
from a maintenance type of offer- 
ing like Software Assurance. And 
we would give them some exam- 
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forcing the company to watch 
costs, it couldn’t upgrade even 
if it wanted to, he said. 

For Joe Brunner, MIS man- 
ager at Sleepeck Printing Co. 
in Bellwood, IIl., the self-paced 
online training for users is ex- 
pected to be particularly help- 
ful, since Sleepeck’s IT staff is 
small. “This is a tool I can give 
them that doesn’t take away 
from my time,” he said. “It’s 
available when they need it.” 

Dwight Davis, an analyst at 
Boston-based Summit Strate- 
gies Inc., said Microsoft was 
forced to look beyond the 
pure software angle to en- 
hance Software Assurance 


ples of benefits that could be de- 
livered. But we tried to go about it 
in a more open-ended way so that 
we could get real feedback on 
what was valuable to customers, 
as opposed to saying, “OK, here’s 
a choice of three things. How 
would you prioritize this?” 





because of the lengthening 
time between major product 
releases. He said customers 
have been paying for Software 
Assurance on “blind faith,” 
without any assurances of the 
upgrades they will get during 
their contract terms. 
“Microsoft should think 
long and hard about its release 
cycle for its software and try 
and build a little more predict- 
ability into its update cycle,” 
Davis said. “If people knew 
they would get releases in the 
next two to three years, they 
would probably enter into 
those contracts more easily and 
with a lot less trepidation.” D 


in the September time frame, 
but any specific customer ques- 
tions should be directed to their 
channel partner or their account 
manager. 


Licensing 6.0 has been out for 


- awhile. When is Licensing 7.0 


* due out? One thing that we've 


If customers want to take 
advantage of any of the new 
benefits prior to Sept. 1, will 
they be able to negotiate to 
gain access to them sooner? 
We're always working with our 
customers on a one-on-one 
basis, and what | would tell our 
customers is, talk to your chan- 
nel partner or your Microsoft 
account manager. We aim to 
make sure that customers can 
take advantage of these benefits 


heard very clearly from our custo- 


- mers is that if we change any- 


thing, they want plenty of notice. 
The other is that they've had 
enough change for a while. So 


> we have no plans for a version of 
: licensing beyond Licensing 6.0. B 


: Toread the complete interview with 
» Landefeld, visit our Web site: 


QuickLink 38761 
www.computerworld.com 
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European Agency Gets OK 
For GPS-like Satellite System 


Galileo to begin 
launching in 2006 


BY BOB BREWIN 
The European Space Agency 
(ESA) last week said its 15 
member states have reached 
an agreement that paves the 
way for the development of a 
satellite-based navigation sys- 
tem designed to rival the U.S.- 
developed Global Positioning 
System (GPS) technology. 
The agreement came just 
two weeks before the sched- 
uled start of an international 
communications conference 
at which the frequencies to be 





used by the European system 
are expected to be decided. 


The ESA said it’s now ready 
| to sign a joint development 


deal for the proposed Galileo 
system with the European 
Union, which will split the 
cost. The project’s budget is 
expected to total $3.7 billion, 
according to Dominique 
Detain, an ESA spokesman 
in Paris. 

The ESA plans to launch the 
first of 27 active Galileo satel- 
lites and three spares in 2006 
and complete the deployment 
two years later. 

Because Galileo will likely 
transmit its signals within the 


same frequency band used by 
GPS equipment, users should 


| eventually be able to buy re- 

| ceivers that can pick up loca- 
| tion signals from both sys- 

| tems, said Ashok Wadwani, 

| president of Applied Field 

| Data Systems Inc., a GPS con- 
| sulting firm in Houston. 


The mixed support could 


provide better data availability 
| and improved location accu- 

| racy. For example, Ken Cham- 
| berlain, a land surveyor at the 

| Bureau of Land Management 


in Portland, Ore., said Galileo 


| should make it easier for 
| agency users operating in 


dense tree cover to access 





| satellite location signals. 


But before the ESA can pro- 
ceed, it must first obtain rights 


| to the needed frequencies at 


the World Radiocommunica- 
tion Conference (WRC-03), 
which starts next week in 


| Geneva. The conference is be- 


ing held under the auspices of 


| the International Telecommu- 


nication Union, a United Na- 


| tions agency with more than 
| 180 member states. 


Restrictive Language 

The U.S. government, in its 
draft proposals for WRC-03, 
inserted language that the ESA 


| and EU view as threatening to 
| Galileo. That language would 


set specific milestones for 


| new satellite navigation sys- 


tems to reach before frequen- 
cies could be assigned to 
them, including “clear and 
binding agreements for the 
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manufacture and procurement 
of satellites.” 

John Alden, a spokesman 
for a WRC-03 delegation that 
will be led by the U.S. State 
Department, said the pro- 
posed language is designed 
solely to weed out “paper” 
satellite systems that are spec- 
ulative or that could be used 
to tie up spectrum resources 
without ever being built. The 
U.S. has told European offi- 
cials that it considers Galileo 
to be a viable system and that 
it isn’t trying to impede its de- 


| velopment, Alden said. 


But Joern Tjaden, head of 
the Galileo interim support of- 


| fice in Brussels, said the U.S. 


draft language is one reason 
the ESA plans to launch the 
first of the Galileo satellites in 
2006. By doing so, he said, the 
agency would meet the crite- 
ria proposed by the U.S. D 
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Nasdaq’s CIO Looks to 
Streamline Systems 


Stock market plans shift | 
from Unix to Linux | 





BY LUCAS MEARIAN 
In an effort to whittle down the num- 
ber of IT platforms it needs to support, 
The Nasdaq Stock Market Inc. is look- 
ing to consolidate systems and net- 
works through a series of moves that 
will include shifting some applications 
from Unix servers to Linux boxes. 

In an interview last month, Nasdaq 
CIO Steve Randich said he also wants 
to eliminate the company’s Unisys 
Corp. mainframes and migrate the 
trading-floor functions that run on 
those machines to its year-old Super- 
Montage order display and execution 
system. SuperMontage is based on a 
combination of fault-tolerant systems 
made by Hewlett-Packard Co. and 
Stratus Technologies Inc., plus Dell 
Computer Corp. Windows servers. 

In addition, New York-based Nasdaq 
is consolidating 15 market data, stock 
trading and corporate e-mail networks 
onto a single IP-based WAN backbone. 
That project will cost $50 million, 


| tends to be the most compat- 
| ible and easiest decision,” 

| Randich said. “I don’t want 

| to bifurcate myself across Linux and 





Randich said. 


SAP, MySQL Sign 
Open-Source 
Database Deal 


BY MARC L. SONGINI 
SAP AG last week said it plans to hand 
off lead development of its SAP DB 
database software to MySQL AB and 
work with MySQL to deliver an enter- 
prise-class version of that company’s 
namesake open-source database. 

SAP officials said the agreement with 
MySQL is an attempt to put increased 
development muscle behind the open- 
source movement and make it easier 
for corporate users to deploy Linux- 
based ERP systems without having to 
pay big database administration fees. 

SAP includes SAP DB with its appli- 
cations as a free alternative to Oracle, 
DB2 and SQL Server databases, and it 
released an open-source version of the 
technology in late 2000. The business 
applications vendor said SAP DB is be- 





ing used by about 1,100 customers. 


Nasdaq currently uses about 300 
Unix servers that run a mix of HP’s 
Tru64 and HP-UX operating systems 
as well as Sun Solaris. Randich de- 
clined to specify how many of those 
servers he expects to replace 
with Linux systems or say 
when conversions to the 
open-source software will 


| take place. But he added that 


Linux will be his first choice 
for migrations, despite the 
existing use of Wintel sys- 
tems inside Nasdaq. 


Rare ; ‘ PTY 
Going from Linux to Unix 


Windows Server 2003. But I do think 
Linux will play a role at Nasdaq in 
helping us minimize our Unix plat- 
forms going forward.” 

The network consolidation project 


is under way, but Randich declined to 
| disclose a rollout schedule. Nasdaq’s 15 


networks are all run by WorldCom 
Inc., which now operates under the 
name MCI. Randich said the stock 

market has yet to pick a services 


Now MySQL will take over steward- 


| ship of the product, said Faheem 


Ahmed, director of market strategy 


| and collaborative solutions at SAP. 
That means MySQL’s development and | 
| management tools will be able to work 
| with SAP DB, which should help cut 

| the cost of administering the database 
| for users, Ahmed said. 


| Continued Existence, Support 
| SAP will continue to support SAP DB 


installations, for both existing and new 
customers. MySQL CEO Marten Mick- 
os said his company is taking over the 


| lead role on tasks such as developing 
| new application programming inter- 
| faces and testing SAP DB to ensure 

| that it continues to conform to indus- 
| try standards. SAP DB will still be of- 


fered “for a long time,” Mickos said. 
But he added that Uppsala, Sweden- 
based MySQL will start marketing the 


Bee , 
| software under its own name by the 


fourth quarter and offer a version un- 
der a commercial license in addition to 
the free release. The agreement will 
also let the company add corporate- 


Ce 


) ClO Steve 

Randich says Linux 

Reel nog 
Ua ete 


provider for the unified Nasdaq Intelli- 


| gent Network, which will be built 
around Cisco Systems Inc. routers that 

| support the Multiprotocol Label 

| Switching standard. 


Despite the heavy investment in net- 


| working hardware and software that 


the new network will require, Randich 


| said he expects to get a rapid return on 
investment. “It will require some reca- 
| bling, but more importantly, we're go- 

| ing to be able to take a lot of circuits 


out of our network and save 
costs,” he said. 


On-demand Computing 
Another likely cost saver is a 
plan to move toward more of 
an on-demand computing ap- 
a proach that would let Nasdaq 
add server or storage capaci- 
ty as needed. Randich said he 
has been putting pressure on 
his hardware vendors to sup- 
port on-demand computing 


| and is seeing “more and more willing- 


ness” on their part to do so. 
But Jamie Gruener, an analyst at The 
Yankee Group in Boston, said some 


| vendors are struggling to create poli- 


cy-based software that can automati- 
cally order additional equipment for 


| users or turn on unused servers and 
| storage devices when specified capaci- 
ty thresholds are reached. “We're not 


there yet and may not be for some 
time,” Gruener said. D 


oriented technologies in SAP DB to its 


| MySQL database, with the goal of 
| slashing the time it would take MySQL 


to develop those features on its own. 
The agreement with MySQL appears 


| to have the potential to enrich the ca- 


| pabilities of SAP DB, said Charlie 


Brann, SAP administrator at Swisslog 
TransLogic Corp. in Denver. Swisslog, 
which makes materials-handling sys- 


| tems, runs SAP DB with SAP’s flagship 
| R/3 applications. Brann said the up- 


coming changes should also open up 
SAP DB to management tools beyond 
what SAP currently provides. 
PeopleSoft Inc. last month an- 
nounced plans to make all of its busi- 


| ness applications available on Red Hat 
} Linux [QuickLink 38335]. 


But SAP is now putting itself ahead 


| of PeopleSoft and other rivals in terms 


of open-source support, said Stacey 
Quandt, an analyst at Forrester Re- 
search Inc. in Cambridge, Mass. The 
agreement with MySQL should also 
give SAP users more choices when 
they pick databases to support their 
ERP applications, she said. D 
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OPINION 


MARYFRAN JOHNSON 


arbanes Action Plan 


MAGINE ASKING 40 CIOs in six cities what 
their biggest worries are these days. I’d expect 
to hear about freeze-dried IT budgets, unfin- 
ished projects, sinking staff morale or loss of 


corporate confidence. 
I’d be way off base. 


What I never would 
have guessed was the 
Sarbanes-Oxley Act of 
2002, that Loch Ness 
monster of new financial 
reporting and disclosure 
requirements enacted by 
Congress in the after- 
math of Enron and a 
string of other corporate 
scandals. Nobody quite 
knows how far-reaching 
its impact on IT infra- 
structures will be, but ig- 
norance is the opposite 
of bliss here. 

“The CIOs feel blindsided by 
this,” says Cathy Hotka, principal of 
Cathy Hotka & Associates and for- 
mer VP of IT at the National Retail 
Federation. In a recent series of CIO 
roundtables she moderated, Hotka 
was surprised to find SOX (as the 
finance types call the act) a topic of 
so much consternation among se- 
nior IT execs. “They know the CFOs 
have it on their radar screens, and 
they don’t like that feeling. Nobody 
has a handle on this yet,” she says. 

Sarbanes-Oxley is reverberating 
throughout IT management like an 
eerie echo of Y2k, with compliance 
deadlines looming and businesses 
feeling threatened and uncertain 
about the extent of the potential 
damage (that is, legal trouble) if 
changes aren’t made. As one of Hot- 
ka’s CIO dinner guests observed, “I 
could end up spending $1 million to 
fix a $100,000 problem!” 

“There’s a tremendous amount of 
confusion” about what IT should be 
doing to ensure compliance with 
Sarbanes-Oxley, says John Hagerty, 
an analyst at AMR Research Inc. in 
Boston. A recent AMR poll of 60 
companies found that while 85% are 
anticipating changes in system and 





application infrastruc- 
tures, an equally whop- 
ping 80% are unsure of 
what the changes will be. 
In light of all this free- 
floating anxiety, last 
week’s news that the Se- 
curities and Exchange 
Commission had extend- 
ed the deadline for Sar- 
banes-Oxley compliance 
another nine months (to 
June 2004) might seem 
like a welcome relief. 
But senior IT man- 
agers should be using this gift of 
time to get their information en- 
gines in gear — not to relax. 

Step 1: Dive in and do some re- 
search. Online in our IT Manage- 
ment Knowledge Center, we’ve 
compiled a special topics page 
[QuickLink a3250] with all of our 


| ongoing coverage of Sarbanes-Oxley 


and additional links to sister publi- 
cation CIO magazine’s recent series 
on legislative issues. We'll keep 





adding resources to that page, so let 
us know what kind of additional in- 
formation you need. If you search 
on Google for “Sarbanes-Oxley and 
CIOs,” you'll get more than 700 hits. 
Many are worth looking over for ad- 
vice, checklists, additional resources 
and examples of what other compa- 
nies are doing. 

Step 2: Survey the vendor land- 
scape. A number of them are cir- 
cling their wagons and offering up- 
graded products or new features 
geared to tracking, safeguarding 
or guaranteeing data veracity. So 
far, the vendors include Oracle, Hy- 
perion, SAS Institute and People- 
Soft, and there are also several ven- 
dors of reporting tools, supply chain 
software and document manage- 
ment applications with offerings. 

Step 3: Formulate an action plan 
that includes a presentation to the 
CFO about the proactive measures 
IT is looking into (or, even better, 
ready to implement) to address a 
range of Sarbanes-related concerns: 
internal auditing and controls, sys- 
tems access, real-time data report- 
ing, detailed IT project tracking and 
so forth. [More action items are on- 
line at QuickLink 34225.] 

Like it or not, IT will be at the 
heart of your company’s Sarbanes 
solution. And if you’re ready and in- 
formed, you’ll be at the head of it. D 
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PIMM FOX 


Goldfinger’s 
Heirs 


CAN SEE the movie trailer 

now: Pierce Brosnan as 

Agent 007 uncovers a se- 
cret slush fund that’s being 
used to bribe world leaders 


and business execs so that 
they’ll eschew Linux in favor of Win- 
dows — software they don’t want. Be- 
hind the scenes, Bill Gates (played by 
Mike Myers) secretly hands out piles 
of cash to greedy governments and 
corporate bigwigs, while his hairless 
cat Orlando plots to destroy Linux 
user groups by listening in on their 
meetings and trade shows. 

This might read like a Hollywood 
script gone sour, if not for a series of 
Microsoft deeds, beginning with a 
memo written last summer by a for- 
mer Microsoft official named Orlando 
Ayala, then the head of worldwide 
sales. His missive put forth a corporate 
strategy to persuade governments not 
to forsake Windows 
for Linux. If deals 
were in jeopardy, Mi- 
crosoft reps were to 
draw from a special 
slush fund to either 
discount or make 
Windows software 
available for free. 

“Under NO circum- 
stances lose against 
Linux,” Ayala wrote. 

A rogue e-mail 
by some excited, 
hyped-up exec? No way. Steve Ballmer, 
Microsoft’s big cheese, got a copy. 

This may be legal and standard op- 
erating procedure for a monopolist 
here at home, but in Europe regulators 
are still investigating whether Micro- 
soft broke antitrust laws. 

According to a follow-up message 
from Michael Sinneck, Microsoft’s 
executive for services, the fund had 
$180 million earmarked for discount- 
ing in 2003. Aboveboard in the U.S., 
perhaps, but in Microsoft's case it’s 
just plain wrong. 

The 2001 settlement with the Bush 
administration has been about as ef- 
fective in forcing Microsoft to drop its 
heavy-handed, anticompetitive moves 
as Iraq’s air force in stopping Opera- 
tion Iraqi Freedom. 

But there is some hope. The combi- 
nation of Linux and people’s general 





Five 
vil 


A Storage Manager's Watch List 





COMPUTERWORLD 


The 


°NO HARDWARE, 


AGENDA" 


storage software company. 





VERITAS Software lowers your storage costs regardless of 
the hardware. EMC. Hitachi. HP. IBM. Sun. What's your agenda? 









Niele Le mee) 


Va 8 


Copyright © 2003 VERITAS Software Corporation. All rights reserved. VERITAS, the VERITAS Loge and all other VERITAS product names and slogans are trademarks or registered 
trademarks of VERITAS Software Corporation. VERITAS and the VERITAS Logo Reg. U.S, Pat. & Tm. Off. All other trademarks are the property of their respective owners. 


AS torage Manager's Watch 
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lobal economic and business uncertain 


ties place a growing strain on IT sys 


tems and the people who install and 


maintain them. Despite tightening 


budgets, customers and, in many Cases, 


regulatory agencies demand better, faster and more cost 


effective access to information. In today’s information 


based economy, these demands translate into enhancing 


the value of existing and planned IT investments while 


simultaneously reducing the cost of IT operations. 


One roadblock is the difficulty 
companies have managing storage 
assets. Enterprises must collect and 
store more information (e.g., medical 
records, customer correspondence 
and e-commerce transactions). They 
must also enhance existing applica 
tions; deploy new ones; and integrate 
rich content (e.g., audio, image and 
video files) into existing solutions 

[he bottom line: a need for more 
storage capacity. In these challenging 
times, simply going out and buying 
more storage is not acceptable. For 
today’s CFO and IT manager, price 
per gigabyte and useful capacity — 
not just raw gigabytes — are at least 


as important as performance for many 


applications. This cost-consciousness 
translates into three requirements 

@ Increase flexibility in purchas 
ing and extending storage capacity 

@ Improve utilization by consoli 
dating and maximizing capacity 

@ Reduce ongoing storage, server 
and application configuration costs 
of resources and time to complete 

The world is awash in technology 
that promises to lower the total cost 
of ow nership and improve ROI. Some 
very visible technologies specifically 
target companies’ storage priorities 

But what is real? What technolo 
gies can you implement today to 
impact the corporate bottom line? In 


this White Paper, we look at five 


technologies that should be closely 
watched by storage managers, data 
center managers and ClOs 

By mid-2004, these storage-relat 
ed technologies will reduce the cost 
per gigabyte of real storage capacity, 
the complexity of organizing and pro 
tecting data within storage systems, 
and the cost of provisioning and man 
aging add-on capacity. Each can help 
reduce the cost of adding storage 
capacity or managing existing assets 
Their real value, however, is in new 
products and services that offer pre 


viously unseen integrated solutions 


1. Serial ATA and Serial 
Attached SCS! 


Since the development of the SCSI 
interface, most servers (other than 
low-end Intel-based servers with 
internal drives) relied on enterprise 
class (SCSI) hard disk drives for local 
storage. Higher performance and reli 
ability requirements made the 
Advanced Technology Attachment 
(ATA) drives (desktop class drives) 
developed for PCs insufficient for 
enterprise applications. As a result, 
SCSI drives commanded a 300% price 
premium over similar capacity ATA 


drives. Today, virtually all storage sys 
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tems use enterprise-class SCSI drives 
or even more expensive Fibre 
Channel interfaces. 

The price differential is not unjus 
tified; SCSI and Fibre Channel drives 
have seen markedly increased per 
formance levels in resistance to vibra 
tion and error correction. Reliability 
is more than twice as high for SCSI 
drives as for similar-capacity ATA 
drives, and testing regimens are more 
intense for enterprise-class drives 
than they are for desktop-class drives 

However, high-performance sys 
tems and mission-critical applica 
tions account for a small portion of 
the overall storage workload in most 
organizations. Recent IDC interviews 
with 900 U.S. IT managers found that 
collaborative applications (including 
email) and basic services such as file 
sharing and Web services are the 
fastest growing consumers of IT 
spending for new servers and storage 
systems (Figure 1) 

These application workloads are 
primarily Intel-based servers running 
Windows or Linux. They're over 
served in terms of performance and 
reliability (but not capacity) by SCSI 
drive-based arrays. Cost-conscious IT 
managers seek drive technologies 
that satisfy less strenuous perform 
ance metrics at lower cost 

The introduction of serial ATA 
(SATA) interface for ATA, improve 
ment in component performance and 
reliability in ATA drives, and the 
capacity advantage over enterprise 
class drives are advancing desktop 
class mechanisms to a point where 
solution prov iders must consider 
their integration into storage systems 


Recognizing SCSI’s limitations, 
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PRLEMENT 


the SCSI Trade Association developed 
a recently approved interconnect 
standard, Serial Attached SCSI 
(SAS). SAS promises to boost SCSI 
interconnect performance while 
maintaining, or even reducing, cost 
In a positive move for customers and 
storage suppliers, SATA and SAS 
developers agreed in 2002 to employ a 
standard interconnect across both 
technologies. SAS silicon will control 
both drives, helping enterprises 
deploy the mix of drive mechanisms 
while leveraging common elements 


such as enclosures and controllers 


Low-cost arrays 


The most obvious offering is a 


standard array product that uses 
large-capacity SATA drives instead of 
enterprise-class SCSI drives. Such a 
system will deliver greater capacity at 
a much lower price but won't deliver 
comparable performance or reliabili 


ty. IT managers at small and medium 


size businesses, and those at larger 
enterprises deploying low-end servers, 
should consider SATA solutions 
Don't expect to see entry-level 
SATA products before late 2003. 
Integrating SATA drives into existing 
environments and completing prod 
uct certification will take time. This 
means standard storage systems with 
SATA drives won't deliver the full cost 
benefits of desktop-class drives, 
though savings will be significant 
Businesses with extensive invest 
ments in storage assets should keep 
an eye on another SATA deployment 
option. Within 18 months, major ven 
dors will announce or deliver 
upgrades to existing mid-range prod 
ucts that will enable them to support 
different interconnects (Fibre 
Channel, SCSI, SAS and SATA) 


Disk-based backup and recovery 
One SATA-based development 


that bears close watching is the disk 
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based backup solution as an enhance 
ment to existing tape systems. 
The widespread use of tape for 


backup and recovery is based on two 


value propositions: cost and portabil 


ity. Potential weaknesses include 
slow recovery times, an inability to 
provide simple access for small ran 
domly located amounts of data and 
potential downtime. 

Disk-based storage systems — 
essentially near-line storage servers 

- are faster than tape when servicing 
frequent restores of small amounts of 
data. They also provide the level of 
functionality and ease-of-use 
required by enterprise users. 

Existing data replication and 
backup systems, whether based on 
tape or expensive disks, provide time 
based restore. IT managers can only 
recover to the system state at the time 
that the backup was performed 
Lower priced disk-based storage will 
offer continuous versioning by lever 
aging new software tools, rapid 
access speeds and disk availability to 
offer event-based restore (recovery at 
virtually any point in time) 

Several vendors are already deliv 
ering near-line storage solutions 
based on less capable parallel ATA 
technology at a price per gigabyte 
that is often one-third the cost of 
their other product offerings. And 
soon, IT managers should look for 
many tape- and optical-based back 
up-and-recovery providers to inte 
grate near-line storage products and 
functions into existing solutions 
Don't expect these systems to replace 
existing tape solutions; rather, look 
for solutions that leverage low-cost 


disk technology to address local and 


remote data and disaster-recovery 


requirements more cost-effectively 


2. iSCSI 


Fibre Channel is the predominant 
interconnect standard today for stor 
age-area networks (SANs). It offers 
high performance and _ reliability; 
enjoys broad industry support; and is 
a critical element in enterprise efforts 
to improve storage capacity utiliza 
tion and remove servers as a bottle 
neck in data backup and recovery. In 
2002, companies across the globe 
spent $2.4 billion on Fibre Channel 
SAN switches and host bus adapters 
(HBAs) for servers and tape systems 

The trouble with Fibre Channel 
solutions (especially for medium-size 
and small businesses) is the initial 
cost to connect servers and storage 
systems. The cost of a Fibre Channel 
HBA for an Intel-based server can 
range from 20% to 50% of the cost of 
the server itself. Even large enterpris 
es have trouble justifying the use of 
Fibre Channel SANs for their low 
end servers, especially at remote sites 

As a result, in 2002, SAN attached 
storage arrays accounted for just 
38.8% of all array sales in Western 
Europe. The rest were either net 


work-attached storage (NAS) filers 


or directly attached to the servers 
The direct attachment of storage to 
servers remains the most significant 
contributor to poor disk utilization 
With direct attached servers, IT man 

agers cannot shift storage from a serv 

er using 20% of capacity to one 
exceeding 80%. In aggregate, utiliza 
tion rates range from 25% to 50%; by 
comparison, in mainframe environ 

ments, utilization can top 80% 

One way to reduce SAN connec 
tivity costs is to take advantage of 
existing widely deployed, low-cost 
technologies: Ethernet and TCP/IP. 
The result is the development of the 
iSCSI standard, which enables the 
connection of servers (initiators) and 
arrays (targets) via IP networks 

The most promising short-term 
use for iSCSI is as a gateway between 
Fibre Channel 


based backup systems. Many low 


IP networks and 


end servers in large enterprises are 
not attached to the corporate SAN, 
either because the connection is too 
expensive or the server is at a remote 
site. While everyone focuses on the 
disk utilization shortcomings of these 
“stranded” servers, they often over 
look the wasteful necessity of deploy 
ing expensive, isolated tape backup 
systems — often inconsistently 
deployed and prone to high failure 
rates when a recovery is attempted 
The deployment of software to 
turn these stranded servers into 
iSCSI initiators allows them to use 
pre-installed features (an Ethernet 
card and an IP stack) and existing 
LAN- and WAN-based IP networks 
to forward data to higher performing, 
more cost-effective and more reliable 


SAN-based tape or (emerging) disk 
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based backup systems 

Companies, suc has Cisco Systems 
Inc. and QLogic Corp., have already 
announced iSCSI-to-Fibre Channel 
gateways (iSCSI routers or bridges), 
and virtually all other major IP and 
Fibre Channel network equipment 
vendors will introduce competing 


products in the next 12 to 18 months 


Riding the SATA wave 


The other major iSCSI opportuni 
ty is as a key supporting technology 
for several of the ATA based solu 
tions. Integrating SATA into low-end 
arrays and near-line storage promises 
to reduce the cost of storage for small 
and medium-size businesses. Much 
of this cost benefit is lost if IT man 
agers deploy expensive Fibre Channel 
arrays, switches and HBAs. By 
employing SATA-based arrays with 
iSCSI interconnects, IT managers can 
take advantage of technologies that 
come pre-packaged with servers as 
well as inexpensive and well under 
stood Ethernet switches. 

IDC recommends that IT man 
agers evaluating iSCSI-capable stor 
age systems deploy a physically sepa 
rate Ethernet network rather than 
attempt to accommodate this new 
traffic type within an existing net 
work. While this approach is modest 
ly more costly, it avoids the security 
and network performance issues that 
can slow initial testing and deploy 


ment of such systems 


Virtualization remains one of the 
most hyped but least understood 


technology concepts in IT. Many ven 


SPECIAL ADVERT 


Technology promises to 
lower TCO and improve 
ROI. But what is real? 


dors have announced next-generation 
IT strategies based on the concept of 
“virtualizing” resources. Over the 
next 12 months, vendors will begin to 
deliver virtualization products 

What practical value can storage 
managers actually expect from these 
solutions? It comes down to two 
straightforward goals: improving the 
utilization of all existing storage 
assets (the long-term goal), and 
reducing the expense and time 
required to migrate data from one 
storage system to anot her, even across 
non- homogenous systems (the short 
term goal). Solutions that address 
these goals deliver enterprise-wide 
volume management and data repli 


cation 


Overcoming the limits of 
existing SANs 


[he popularity, diversity and size 


of SANs present IT managers with 
new manageability issues related to 
increasing numbers of pooled arrays 
a growing variety of storage con 
trollers; and disparate supporting 
software solutions for data migration 
and replication. This heterogeneity 
results in many isolated SANs, 
increasing cost and introducing addi 
tional management complexity. 
Virtualization is a new approach 
to storage system design that intro 


duces a layer of logical abstraction 
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between physical blocks of data on 
storage devices and the logical vol 
umes of information that servers and 
applications require. The goal is to 
disassociate blocks of storage capaci 
ty — logical unit numbers (LUNs) 
from specific volumes required by 
server applications, eliminating the 
need to continually manually recon 
figure both server and storage con 
nections when changes are made 

By leveraging controller functions 
for LUNs and volume management in 
a networked storage controller, IT 
managers can introduce a logical layer 
of abstraction between LUNs and 
volumes. That means IT can connect 
applications to specific virtual vol 
umes without needing any knowl 
edge of the underlying disk environ 
ment, even across heterogeneous sys 
tems. Moreover, IT can add capac 
ity to virtual volumes without server 
reconfigurations 

The deployment of data replica 
tion functions and volume manage 
ment within a networked storage 
controller leads to several significant 
improvements in the way IT 
approaches data protection and 
recovery. Replication will be per 
formed at the logical volume level, 
making it possible to replicate vol 
umes across heterogeneous storage 
arrays, rather than only on homoge 
nous systems 

IT can take advantage of installed 
systems or use lower cost storage sys 
tems for near-line storage without 
sacrificing system integrity. 
Performing data replication functions 
on networked controllers provides a 
foundation for consistent data repli 


cation and recovery policies. 
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Sifting through the choices 

IT managers will soon be con 
fronted with virtualization solutions 
from a variety of software, storage, 
networking and systems vendors. A 
second family of virtualization solu 
tions, based on an appliance model, 
will hit the market shortly. Finally, 
there are blade-based virtualization 
systems that reside within the SAN 
switch, similar to appliances that 
move many storage management 


functions fully into the network 


implementation is the key 


The delivery of products for net 
work-based volume management and 
data replication represents a signifi 
cant change in traditional storage 
architecture and processes. Installing 
such systems won't guarantee better 
capacity utilization and reduced 
management costs. Effective imple 
mentation is a critical concern for 
these emerging solutions. IT man 
agers need to establish rules and pro 
cedures for everything from naming 
conventions to provisioning and 
replication policies. They must then 
set up volume management and data 


replication systems 


_ Content-Aware Storage 


For all organizations, stored data 


falls into three broad categories 

@ Structural data, such as flat 
file transactional systems; business 
intelligence tools; and relational data 
bases that typically support mission 
critical business systems. High relia 
bility, recoverability and performance 
are the critical features here 


@ Fixed content, such as end 


Soon, storage vendors 
of all stripes will imple- 
ment the SNIA’s SMIS. 


user office productivity files, email 
archives, audio, video and images. 
Unstructured data is stored in print 
ed or analog form, on dispersed file 
servers or within relational databases 
as large binary objects 

@ Archival data, such as backup 
copies of critical transaction data and 
select unstructured data for disaster 
recovery and long-term record keep 
ing. Tape and optical systems are the 
preferred option for both local and 
remote storage of this data 

Fixed-content applications are a 
new market in which companies’ 
storage needs focus on different per 
formance measures that are either 
over- or underserved by today’s disk 
and tape solutions. While NAS may 
reduce some costs, it does nothing to 
resolve the problem with existing 
storage systems used today for fixed 
content: non-existent and/or ineffec 


tive organization and management 


Making storage content-aware 

By mid-2004, a number of new 
storage-related technologies will 
begin to address the cost of provision 
ing and managing capacity. Capacity 
oriented SATA mechanisms, virtual 
ization and iSCSI promise to reduce 
cost and boost data mobility while 
maintaining performance levels that 
are more than satisfactory for fixed 


content 
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Inexpensive capacity, improved 
data mobility and less costly connec 
tivity solutions address only a part of 
the fragmentation and lack of organi 
zation that lead to lost data, wasted 
capacity and excess management 
costs. For enterprise IT, the key to 
cost-effective storage for fixed con 
tent will be software solutions that 
separate information about content 
from information about its physical 
location. 

Content-aware storage (CAS) 
solutions, sold initially as integrated 
storage and software systems, will 
store data as objects, not simple files. 
CAS will require no knowledge of the 
storage environment or physical loca 
tion of the objects (it will leverage 
underlying virtualization services to 
handle this issue). Each object has 
attributes, including a unique foot 
print, allowing data to be stored only 
once to service all requests. 

Object-oriented data structures 
and distributed file system services 
implemented in CAS deliver 
improvements on several dimensions 
relative to traditional file-based sys 
tems. These include allowing for 


customized searching, adding verifia 


eg, 
bility (e.g., ensuring specific content 
has been unaltered) and eliminating 
the need for duplication. These attrib 
utes will significantly change the cost 
of fixed-content disk-based storage 
for applications such as email and 


image archives 


CAS options 

A number of software startups 
were early champions of content 
aware storage solutions, but the most 


significant early participant has been 





Apparently the word is out everywhere. BrightStor™ A erve” Backup is among the most reliable and widely used 
backup solutions in the world. in fact, hundreds of thousands of peopie rely on BrightStor ARCserve Backup 


technology to protect their critical servers. Now we've created BrightStor” ARCserve” Backup v9, the most advanced 


version ever. As part of the BrightStor™ line of storage management solutions, BrightStor ARCserve Backup v9 is amazingly powerful yet 


one of the simplest to use and easiest to install solutions out there. In fact, most users can perform their first backup within 20 minutes 


of start-up. And that means it’s the perfect backup software choice for, well, just about everyone mibr rlarcserve9 


—. 
4 “\ 
7 


BrightStor™ ARCserve” Backup ca) Computer Associates 


~~ 





EMC with its Centera product line. 

IDC expects other major storage 
system suppliers to introduce CAS 
solutions in the next 12 months 
Initial CAS implementations will 
work best if they target specific 
n , such as email archiving or 
medical record storage. 

Another important group of stor 
age suppliers that will play a role in 
bringing CAS to small and medium 
size businesses are current suppliers 
of backup-and-testore solutions. For 
these companies, CAS is a sustaining 
innovation, enabling significant 
enhancements in the reliability, speed 
and usefulness of existing back 
up/recovery solutions. Truly effective 
CAS solutions for small and medium 
size businesses will take more time to 


come to market. 


5, Standards-Based 


Management 


A recurring theme in each of the 


previous discussions is the interd 

pendence of the solutions. IT mar 

agers can only reap the maximum 

benefits if these technologies work 

together. One impediment: the “certi 
tion crisis.” 

Customers understandably 
demand extensive testing of different 
combinations of arrays, tape systems, 

rating systems and appli 
cations. In the days of direct attached 
storage and relatively homogenous 
environments, this requirement, 
while resource-intensive, was man 
ageable for most vendors. But in 
today’s world of diverse server plat 
forms, operating systems, SAN in 


e products and storagi 
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ucts, the testing tired is growing 
exponentially 

Testing is now a major barrier to 
entry for storage startups. The time to 
roll out features and functions is 
stretching to more than six months 
for many products. Even the largest 
vendors find it hard to keep pace with 
testing needs. The result is reduced 


choices and less interoperability. 


Learning to trust standards 

The storage sector is not the first 
IT industry to face such a crisis 
Networking was in a similar predica 
ment in the 1980s. The adoption of 
standards for network connectivity 
significantly improved product inter 
operability while reducing the need 
to test every possible product combi 
nation. 

The Storage Networking Industry 
Association (SNIA) has long champi 
oned the development of standard 
processes and protocols. The SNIA 
storage model helped define the logic 
behind many of today’s new technolo 
gies, including virtualization and 
CAS. Another critical SNIA effort has 
encouraged interoperability testing 
and certification for storage solutions 
such as iSCSI. 

SNIA’s most important effort, 
however, is to drive the creation of the 
Storage Management Interface 
Specification (SMIS) for monitoring 


and managing all storage-related sys 


tems. Today’s version, approved early 
this year, by no means represents the 
final iteration. Over the next six 
months, storage vendors of all stripes 
will begin to implement SMIS. 

For the first time, IT managers 
will be able to collect and access com 
mon information for storage systems 
throughout the enterprise, regardless 
of which vendor supplied those sys 
tems. Such information is a powerful 
resource for monitoring inte r 
ability, better managing storage 
capacity and limiting the impact of 
inevitable failures. 

New versions of SMIS-capable 
management products will provide 
additional functions in the areas of 
auto-discovery, configuration and 

rformance monitoring. When these 
standards arrive, IT managers will 
finally have the ability to automate 
repetitive storage configuration tasks 
and introduce more policy-driven 
management systems across diverse 
storage environments. 

The ultimate success of the SMIS 
is in the hands of IT managers. SMIS 
and its brethren certainly won't solve 
all storage management woes on day 
one, but greater reliance on these 
standards will help reduce the level 
of certification testing needed. Only 
by insisting that suppliers use inter 
operability and management stan 
dards will IT ensure continued 


upgrades to these standards. 








To me, success is a 35 minute lunch. 


At a restaurant, not my desk. 


Means I’m not wasting time doing the 


same data management task again and 


again and again and...well, you get it. 
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Save the day. 


Consolidate your work by consolidating data from all your different systems. One way is with a V2X Shared Virtual Array™ subsystem 
and SnapVantage™ software to unite all your Linux virtual servers. Or an L5500 automated tape library and T9940B tape drive. There 
are other ways, too. We'll help find the one that’s best. So storage administration takes a smaller bite out of your day. Learn more 


V2X Subsystem about this story and other ways we can help you at www.savetheday.com ‘ SS STORAGETEK’ Save the Day.” 
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where information lives 


DID YOU KNOW THAT SOME OF OUR 
BEST STORAGE PRODUCTS COME 
ON A DIFFERENT KIND OF DISK? 


OUR SOFTWARE GIVES YOU SOME 
VERY SMART CHOICES. 


To manage complexity, you’ve got to outsmart it. EMC Automated Networked Storage™ delivers 
the software that automates management of your multi-vendor storage infrastructure, including 
the most error-prone tasks such as monitoring and provisioning. Now you can gain a unified, 
end-to-end view of your entire environment. Define your service levels. And run an agile, active 
infrastructure that helps the business pounce on opportunity. 


See how other companies are using EMC Automated Networked Storage to manage more 
information with less effort at www.EMC.com. 
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disgust with the way Microsoft does 
business could thwart the company’s 
ambitions in the server market. 

And that threat is causing Microsoft 
to do some pretty bizarre things. 

Microsoft employees have been hid- 
ing their identities as they imperson- 
ate independent computer consultants 
and OEM reps at trade shows in the 
U.S. to get information about competi- 
tors. Microsoft doesn’t see anything 
amiss in these deeds. 

And the company continues to ar- 
gue that the slush fund will be used 
wherever it’s needed. 

It’s great that Bill Gates wants to 
spend his millions improving health 
standards and supporting education 
around the world, but if his company 
continues to operate without any ethi- 
cal standards, what kind of world is he 
helping to create? 

As the saying goes: If you want to 
know what God thinks of money, just 
look at the people He gave it to. B 


Harvard 
Flunks IT 


ARVARD BUSINESS 

School has many suc- 

cessful graduates (our 
CEO in chief, George W. 
Bush, to name but one) and a 


proud history of IT scholar- 
ship. But I fear that the time has final- 
ly come to stick a fork in it as far as 
thought leadership in IT is concerned. 
All of us in the profession have, at 
least once during our careers, bowed 
reverentially to capitalism’s Mecca on 
the Charles as we sought to merge the 
historically different and often non- 
convergent disciplines of technology 
and business management. No more. 
Nicholas G. Carr, writing in the lat- 
est issue of the school’s highly influ- 
ential publication, the Harvard Busi- 
ness Review, has penned a neo-Lud- 
dite, could-have-been-written-by-the- 
Unabomber (another Harvard guy) 
antitechnology article, “IT Doesn’t 
Matter.” It pretty much tells IT leaders 
that they should pack their bags and 
go home. As I read the article, barely a 
sentence went by without me gasping 
We are told that IT is no longer 
strategic, that the now-and-forever- 
more infrastructure is pretty much 
built out, that vendors are “rushing to 
position themselves as commodity 
suppliers” and that we should no 


OPINION 


longer “seek advantage ag- 
gressively” but instead 
should “manage costs and 
risks meticulously.” The ar- 
ticle makes Bill Joy’s “tech- 
nology will destroy the 
world” speech look upbeat. 

He is dead wrong on all 
counts. Of more concern, 
however, is the sad fact that 
many weak-minded, vision- 
challenged business execu- 
tives will use this as ammu- 
nition to further reduce the 
influence and impact that 
appropriately managed IT 
can have. 

An oft-lobbed criticism against Har- 
vard Business School is that it gets the 
past perfectly and is pretty close to 
correct on the present but still man- 
ages to flunk the future. This may have 
something to do with its fetishlike ob- 
session with the case study method, 
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which by its very nature is 
an exercise in historical 
analysis. 

What Carr doesn’t seem 
to understand is that the 
future is all about the evo- 
lution and blurring of the 
interface between people 
and our machines. The en- 
vironment we will live, 
work and play in will be- 
come inexorably more dig- 
ital. The Darwinistic forces 
of information natural se- 
lection are just now begin- 
ning to exert themselves. 

| Our aptitude for information manage- 
ment will determine much of our 


the evolution of our species. Whether 
our endpoint is Digital Eden or High- 
tech Hades is very much up to us. 
Carr overfocuses on the current 
pre-Edenic environment, a time when 





machines are just machines — rela- 


| tively simplistic, nonintelligent chunks 
| of metal and silicon. When they break, 


we are screwed. When they work, we 


| are victimized; pagers, for example, 
| are little more than electronic leashes. 


But in Digital Eden — a place we will 


| never see if we follow Carr’s advice — 
the machines will work for us. 


In closing, let me paraphrase yet an- 


| other Harvard guy. Bobby Kennedy 


was defining youth, but I will apply it 
to IT: “IT is not a menial task waiting 


| to be outsourced, but a state of mind, a 


temper of will, a quality of imagina- 
tion, a predominance of courage over 
timidity, of the appetite for adventure 


| over the love of ease.” 
lives. “Being digital” is the next step in | 


IT does matter. D 


WANT OUR OPINION? 


More columnists and links to archives of previous 
columns are on our Web site: 





| www.computerworld.com/columns 





F NICHOLAS G. CARR were cor- 

rect about the commoditization 
of IT and the related lack of strate- 
gic value to business [“Get Over 
Yourself,” QuickLink 37990], every 


CEO would get the same answer to | 
the question, “What is the cheapest | 


IT solution?” Just as with electrici- 
ty, companies’ needs would vary 
only in quantity, not quality. How- 
ever, those of us who have spent 
our careers in IT know that the an- 
swer to this question is always, “It 
depends.” And what it depends 
upon, more than anything else, is a 
company’s strategy. 

Typically, competitive strategy 
leans toward one of two forms: be- 
ing the low-cost provider of a com- 
modity product or service, or being 
a value-added provider of a differ- 
entiated product or service. The va- 
riety and complexity of IT solutions 
are such that there is an almost infi- 
nite number of “correct” IT solu- 
tions and investment strategies for 
either of these competitive strate- 
gies; however, the set of solutions 
that works for one will not be the 
same as the set that works for the 
other. This, | think, makes IT man- 
agement, which includes the selec- 
tion, maintenance and deployment 
of new and ongoing IT capability, a 
key strategic issue. 

Getting IT right is a difficult prob- 
lem that many executives face, and 
while some will appreciate the silver 
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Carr Draws Fire: IT Remains Relevant 


bullet Carr offers, most, | expect, will 
find his naiveté discouraging. 
Cathy Hyatt 

IT consultant, San Francisco, 
cathyhyatt@sbcglobal.net 
Editor’s note: A longer version 
of this letter appears online at 
QuickLink 38709. 


ISTORY TEACHES that tech- 

nology is highly cyclical. It is 
simply absurd that anybody would 
believe that technology no longer 
provides a source of competitive 
advantage. It’s never been the 
technology that creates advantage 
in the marketplace; it's how compa- 
nies strategically implement their 
business processes around the 
technology. From the general tone 
of recent issues, Computerworld 
seems bent on punishing the IT 
profession for unspecified past 
sins. The truth is that our industry 
and profession are in the middle of 
a normal cyclical downturn. | won- 
der what you will publish when the 
tech sector rebounds and busi- 
nesses return to gaining long-term 
advantages from technology. 
Steve Thornton 
IT director, 
San Ramon, Calif., 
Stevo64@yahoo.com 


EWS FOR NASA: Put that plan 
for a manned mission to Mars 
in the trash can; Nicholas G. Carr is 





already there! Carr's comments are 
so far removed from earthbound 
reality, he simply must be on a dif- 
ferent planet. While his planet has 
apparently already exploited the In- 
ternet to its maximum potential, de- 
velopers still here on planet Earth 
are struggling to get Windows ap- 
plications to talk to Unix servers. 
Mike Watts 

Lead systems engineer, 

AIG American General, 
Neptune, N.J., 
michael_watts@aigag.com 


ICHOLAS G. CARR does indeed | 


have a point, in that IT technol- 
ogy has become something any 
company can own at the same level 
as its competitors. The only advan- 
tages in computers now are simply 
in automating faster, organizing in- 
formation better, transmitting it eas- 
ier and doing it all for less than your 
competition. Stiil, technology as a 
whole will keep evolving. New tech- 
nology will appear, as the Web did 
in the 90s. These new technologies 
will create temporary barriers that 
will allow short-term strategic ad- 
vantages. IT will also have a branch 
that will become the “bird dogs” of 
technology to help scout out these 
new avenues. 

Just as economists attempt to 
determine financial advantages for 
companies, IT will do the same with 
technologies. As revolutionary as IT 
has been for quite a while, it will be 
the leaping-off point for even more 





wondrous technology, just as elec- 
tricity was the wonder technology 
that eventually led to computers. 
John E. Columbus 

Owner, Columbus Consulting 
Group, New Hope, Minn. 


MEN to Patricia Keefe’s rebuttal 
to Nicholas G. Carr [“IT Does 
Matter,” QuickLink 38298]. As a 


| former IT manager doing ClO-level 


work for a small company, | believe 
there is still plenty of room for the 
strategic use of technology. The 
tools may be commoditized, but the 
majority of companies for which 
those tools will be useful are still 
learning how to take hold and make 
use of them. Keefe was right on the 
money. 

Shannon Mollenhauer 


| IT management consultant, 


ComputerLand of Peoria, 
Peoria, Ill, Shannon@ 
computerlandpeoria.com 


COMPUTERWORLD welcomes 
comments from its readers. Letters 
will be edited for brevity and clarity. 
They should be addressed to Jamie 
Eckle, letters editor, Computerworld, 
PO Box 9171, 500 Old Connecticut 
Path, Framingham, Mass. 01701. 
Fax: (508) 879-4843. 
E-mail: letters@computerworld.com. 
Include an address and phone num- 
ber for immediate verification. 

For more letters on these and 


other topics, go to 
www.computerworld.com/letters 
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TIBCO Software has made real-time business and integration a reality for more 
easily-deployed solutions. To discover why TIBCO continues to be chosen over 
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ROBUST OBJECT DATABASE | 


Our post-re ational database. 
This is the next wave. 


For your next generation of applications, 
move to the next generation of database technology: 
Caché, the post-relational database. 

What makes Caché “post-relational”? It provides 
developers three integrated data access options which 
can be used simultaneously on the same data: an 
advanced object database, high-performance SQL, 
and rich multidimensional access. 

Because Caché’s architecture is a multi- 
dimensional structure, applications built on it are 
massively scalable and lightning-fast. 

Plus, no mapping is required between object, 
relational, and multidimensional views of data. 

This means huge savings in both development and 
processing time. And, Caché-based applications 
don’t require frequent database administration or 
hardware and middleware upgrades. 


More than just a database system, Caché 
incorporates a powerful Web application develop- 
ment environment that dramatically reduces the 
time to build and modify applications. 

The reliability of Caché is proven every day in 
“life-or-death” applications at hundreds of the largest 
hospitals. Caché is so reliable, it’s the world’s leading 
database in healthcare — and it powers enterprise 
applications in financial services, government and 
many other sectors. 

We are InterSystems, a specialist in database 
technology for 25 years. We provide 24x7 support 
to four million users in 
88 countries. Caché is 
available for Windows, 
OpenVMS, Linux and 
major UNIX platforms. 


InterSystems » 


E.. CACHE 


Make Applications Faster 


Download a fully-functional version of Caché or request it on CD for free at www.|nterSystems.com/post-relational 





© 2003 InterSystems Corporation. Ail rights reserved. InterSystems Caché is a registered trademark of InterSystems Corporation. 
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The advances made by IT are 
enabling other professions to push 
the envelope - arming scientists 


with supercomputers to model 
disaster cleanups, and surgeons 
with 3-D imaging to locate and 
remove tumors. Read how this 
year's Computerworld Honors 
finalists are helping to shape | 
society's future through technology. | EEISzisMesneenmssoeee 
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| Researchers at the University of 
| Manchester have developed a 3-D 
display of imaging data sets that 


- | doctors can navigate during oper- 
Doctors Bring 3-D | ations. Until now, surgeons have 
S | largely relied on 2-D images from 
| Imaging Into the computerized tomography (CT) 
~ | scans to show the locations of or- 
| Operating Room | gans and tumors. 
Current CT scanners produce 
BY EUGENE A. DEMAITRE | 400 to 2,000 cross-sectional image 


HE HAS A JOYSTICK in one hand | slices, but only about one-tenth of 
and his eyes are glued to ascreen, | them are typically used, says Dr. 


but this surgeon isn’t playing a | Rory McCloy, lead surgeon of the 
video game. He’s in an operating | 3-D Volume Visualization in the 
room, rehearsing an incision by Operating Room project, also 
looking at a projection of 3-D | known as Op3D. 
images of a patient’s internal | Although many radiology de- 
organs. He can rotate and move | partments have already been us- 

| among “slices,” studying fine | ing 3-D image reconstruction at 
anatomical details before his real Continued on page 26 
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A doctor at the Manchester Royal Infirmary uses Op3D technology to navigate 3-D images 
of a patient’s anatomy during surgery, using an off-the-shelf gaming joystick. 


their workstations, one impetus 
of the Op3D project was getting 
those scans to “the sharp end” — 
the operating room — where they 
could be better used, McCloy says. 

The computing power of a con- 
ventional desktop PC or a physi- 
cian’s laptop wouldn’t be suffi- 
cient for such a task, says Nigel 
John, head of the Manchester 
Visualization Centre at the uni- 
versity. The Manchester, Eng- 
land-based center has developed 
a custom application using the 
OpenGL Volumizer application 
programming interface. It takes 
graphical data from the Manches- 
ter Royal Infirmary’s Onyx 300 
Silicon Graphics Inc. server and 
allows for volume-rendering 
segmentation in real time, he 
explains. 

“We had the power at the uni- 
versity, but [McCloy] needed the 
data distributed across the net- 
work,” John For that, Op3D 
uses Manchester University’s 1GB 
backbone, which has a 100Base-T 
Ethernet link to the surgical the- 
ater, he says. Mountain View, 
Calif.-based SGI’s OpenGL Viz- 
server system is used to distribute 
data across the network. 

There is a trade-off between 
image quality and speed, but “we 
wanted both and required the 
highest-quality image possible,” 
says John. The slices, which an 
XVGA data projector displays on 
an operating room wall, can rotate 
at more than 10 frames per second, 
depending on network traffic. 

“There’s a big ‘wow’ factor 
when I show the resolution and 
mobility [of these images] to X-ray 
doctors,” says McCloy. 


| 
| 


“All 3-D images must have an in- 
terface that does not require labo- 
rious image editing and that is real 
time in its performance, or it will 
be rejected as a hindrance to work- 
flow,” says Dr. Leo Lawler, an as- 
sistant professor at Johns Hopkins 
University in Baltimore. 


Navigating ‘Tiger Country’ 
To move through and among im- 
ages, McCloy uses an ingenious 
solution: an off-the-shelf gaming 
joystick wrapped in a sterile bag. 

“A surgeon can change modes, 
zoom in with a single click. The in- 
terface is quite intuitive and was 
designed to be simple for surgeons 
to use,” says McCloy, who has 
trained surgical residents to use it. 
He has applied the Op3D system 
to surgery involving the liver and 
pancreas, which he says are “right 
in the middle of what we call ‘tiger 
country’ — in the middle of the 
body, surrounded by arteries, 
veins and vital plumbing.” 

Since the project began in April 
2002, Op3D has been used with 
about 15 patients. Through this 
technique, McCloy has observed 
tumors that are inoperable, mean- 
ing that their removal would not 
improve a patient’s chances of 
survival. 

“We didn’t appreciate the na- 
ture of inoperable tumors before 
with 2-D scans,” he explains. 
“Surgeons normally have got to go 
in to find the context of a liver tu- 
mor, but now they can check the 
image to avoid cutting into the tu- 
mor and spreading cancer.” 

“The question is no longer why 
do 3-D reconstructions, but rather, 
why not,” says Lawler. D 


Bank Uses 

Online Workflow 
To Comply With 
USA Patriot Act 


BY PATRICK THIBODEAU 

THE USA PATRIOT ACT, an anti- 
terrorism law enacted in 2001, 
gives the government the power 
to demand more information 
from financial services firms 
about their customers and to re- 
quire that it be produced quickly 
for investigators. 

The law asks for a lot, but it 
didn’t rattle Pete McCormick, CIO 
at Sumitomo Mitsui Banking Corp. 
in New York. 

First, there was no choice but 
to comply. The government regu- 
lates financial services firms, and 
meeting federal law isn’t optional. 
Moreover, McCormick, who works 
only a few miles from Ground 
Zero, says he had that nearby re- 
minder of the need to stomp out 
terrorism. 

Second, if done right, compli- 
ance wouldn’t necessarily be a big 
burden. The bank already had 
many of the pieces in place. For 
example, it routinely looked for 
money-laundering activities and 
had to meet federal requirements 
to keep track of certain assets. The 
Patriot Act “isn’t so new and so 
scary,” McCormick says. 

But the issue McCormick faced 
was how to improve those proc- 
esses, scale them to reach through- 
out the company and turn these 
monitoring capabilities into “a 
more seamless manifestation” of 

isting abilities, he says. 

Instead of building a new system, 
the bank wanted to leverage exist- 
ing technologies and functions. It 
turned to an online process that 
used a browser front end, middle- 
ware and workflow engines devel- 
oped by Sybase Inc. in Dublin, 
Calif., to automate these processes 
and speed access to information. 

A key requirement was speed. 
The Patriot Act requires financial 
services firms to respond to sub- 
poenas in five days or less; nor- 
mally, it could take weeks to as- 
semble the data. 
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Mandel, dean of New York University’s Office of Libraries. 


The law also requires the bank 
to check government lists of sus- 
picious persons against its own 


“If [banks] are going to invest in 
this system and have a more com- 


plete view of their customers, 


they might as well leverage this,” 
says Jessica Goepfert, an analyst at 


IDC in Framingham, Mass. 


That’s just what Sumitomo Mi- 
tsui did. The workflow and im- 
proved analysis capabilities will 
be used in other bank processes 
apart from compliance and will 
enhance the bank’s ability to know 


its customers. 


“All the technology was there; 
everyone was using it. I think [the 
law] created a catharsis,” says Mc- 


Cormick. D 


“The knowledge that can be gained through digital content is what excites me,” says Carol 
customer records. 


_ ocholars Archive 
Artifacts in 

' A Multimedia 

' Digital Library 


BY THOMAS HOFFMAN 
COLLEGES AND UNIVERSITIES have 
been digitizing their libraries for 
the past 10 years to help capture, 
store and preserve different types 
of analog content electronically. 
But many of those efforts have 
focused primarily on capturing 


| Mandel, dean of NYU 
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| text or still images. Over the past 


four years, librarians, technolo- 


| gists and scholars at New York 


University have pushed hard to 
expand its digital library to in- 
clude myriad content types — 
from electronic journals to sound 
and moving images. 

“This is a rapidly changing envi- 
ronment, and we need to look 
ahead to the future,” Carol 
s Office of 
Libraries. 

For Mandel and other NYU offi- 
cials, digital content can take all 
shapes and forms. For instance, 
the university has an extensive 
collection of materials on activism 
and radical politics that is ac- 


| cessed by people from all over the 


world, s: Mandel. That collec- 
tion includes political pamphlets 
that have been archived to NYU’s 


| Web site in digital form (www. 


nyu.edu). 

Meanwhile, NYU’s School of 
Medicine is developing multi- 
media modules that can be used to 
teach medical students how to 
conduct procedures such as gall 
bladder surgery. 

NYU has also been working 
on preserving unique video mate- 
rials, such as the hearings and vid- 
eotaped testimony of the Women’s 
International War Crimes Tri- 
bunal on Japan’s Military Sexual 
Slavery. In another project that 
was spearheaded by a professor in 
NYU’s Middle Eastern Studies de- 


| partment, the university was able 


to electronically archive rare and 
often fragile historical documents 
that were discovered in Afghan- 
istan following the U.S. military 
invasion in 2001. 

The university uses a highly in- 
tegrated set of technologies to 
help support its digital library. 


| The core platform is hosted by a 


Sun Microsystems Inc. Enterprise 
15000 server, which runs on So- 
laris 2.9 and uses Sun’s StorEdge 
T3 disk arrays and a StorEdge 
L700 tape library system for back- 
up, says Jerome McDonough, 
NYU’s digital library development 
team leader. NYU also uses an 
Enterprise 3500 server running 
Solaris 2.9, which it uses as a 
research-and-development and 
testing platform. 

For content management, NYU 
relies on a mix of commercial and 


| homegrown software, including 


DigiTool from Ex Libris (USA) 
Continued on page 28 





COMPUTERWORLD June 2, 2003 


OE Cr Curls mm 


y 


Nat mesic 


apt) on A 


RSS onteaa Ci Energy s Pacific ale 
So — t 


China Merchants Bank - The first bank 


VUTEC Ut 1 ef 


. 


IntesaBci SpA - Virtua 


Ris P ese aera Clg) ean 


Sumitomo Mitsui Banking Corp. - A 


Tem elt eel al ee mel 


Aes it 
LST We Tucre i corse clcls 


Daeg mlm croele mean 


South Australia Department.of Human Services 


U.S. Agency for International Development 









COMPUTERWORLD June 2, 2003 


Inc., a library software maker in 
Chicago. The university also 
draws on a homegrown database 
system for metadata capture dur- 
ing digitization that it affection- 
ately calls “Zero,” named for the 
eam a library computer in the original 
cheloge Wihes 5 stateless ith vimaricac Rollerball film, says McDonough. 
The system is built on top of 
sattiniaae Oracle9i and uses a Web-based 

; Raa PS esa PR front end, written primarily in 
ating better cars sooner while reducing t I Perl, that allows users to input 
descriptive administrative and 
structural metadata for objects, 
he adds. 

One of the biggest challenges 
NYU has faced throughout the ex- 
pansion of its digital library has 
been maintaining sufficient stor- 
age capacity, says Mandel. For in- 
stance, one hour of high-quality 
video can require 120GB of stor- 
age. A single video collection — 
PH ee oy such as NYU’s compilation of 

meee NOR aL artists in downtown New York — 
can include up to 500 hours of 
video footage, requiring 60TB of 
storage. Mandel credits the rela- 
tionship NYU has formed with 
Sun in helping it work through its 
capacity requirements. 

Beyond that, universities such as 

NYU have found themselves pit- 


Ford Motor Co. Scientific Research Lab - An 
GE Silicones 
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ted against businesses that want to | 


te y oe) charge a fee for digital content. 
“Sharing content for scholarly 
purposes is what we’re all about,” 
says Mandel. 

But these challenges haven't 
dimmed Mandel’s vision of the fu- 
ture. “The knowledge that can be 
gained through digital content is 
what excites me,” she says. “Sud- 
denly, scholars have access to his- 
tory about a country like Afghan- 
istan that historically has not been 
well understood.” 

That’s also something that ex- 
cites John Parkinson, chief tech- 
nologist for the Americas at Cap 
] Gemini Ernst & Young in Chicago. 
batts hepanee ide gape Although Parkinson didn’t have 

ga pas inal e previous knowledge of NYU’s ef- 

F forts, he is familiar with what other 
universities, such as Johns Hop- 
kins University and the University 
of Chicago, have been doing to 
make extensive use of digitized 
content. 

“This opens up a whole new set 
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of opportunities for researchers,” 
Parkinson says. Once content is in 
digital form, he adds, scholars can 
conduct research “on patterns 
across geographies and time that 
would be very difficult to do using 
analog documents.” DB 
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scientists to 
Test Disaster 
Scenarios With 
Supercomputer 


BY TODD R. WEISS 

AS POWERFUL COMPUTERS are 
harnessed together to create even 
more powerful supercomputers, 
scientists continue to find new 
ways to exploit this strength by 





“We can solve problems here that can’t be solved anywhere else,” says Scott Studham, 
technical lead of molecular science computing facility operations at Pacific Northwest. 


www.computerworld.com 








conducting experiments they 
could only dream about in the past. 

At the Pacific Northwest Na- 
tional Laboratory in Richland, 
Wash., a massive Linux supercom- 
puter that will be completed this 
month will be used to help model 
some of the most challenging and 
dangerous environmental cleanup 
scenarios in the world. 

Scott Studham, technical lead of 
molecular science computing fa- 
cility operations at the laboratory, 
which is part of the U.S. Depart- 
ment of Energy, says the goal was 
to create a supercomputer that 
would allow scientists to model 
disasters that wouldn’t be feasible 
to test in real life. 
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One such disaster might be an 
accidental spill of radioactive ura- 
nium, Studham says. Using the 
new supercomputer, scientists 
will be able to model a wide vari- 
ety of substances, including en- 
zymes, in their search for materi- 
als that could help in the cleanup. 

“That would be an example [of 
testing] that’s too dangerous or 
expensive to do in a real lab,” 
Studham says. With a supercom- 
puter, such high-risk experiments 
are safe because the testing is the- 
oretical. 

Using a powerful custom chem- 
istry modeling program called 
NWChenm, the lab’s researchers 
can peruse particles to search for 
better ways of cleaning up envi- 
ronmental hazards. “We can solve 
problems here that can’t be solved 
anywhere else,” Studham says. 

Other programs can model dif- 
ferent types of environmental dis- 
asters, including oil spills. The 
core research areas for the ma- 
chine are chemistry, subsurface 
modeling, biology modeling and 
regional climate experimentation. 

When completed, the machine 
will include 1,900 Intel 1.5-GHz 
Itanium 2 processors in 950 nodes, | 
which is believed to be the largest 
Linux cluster in the world. The su- 
percomputer, which is designed to 
perform 11.7 trillion floating-point 
operations per second, will cost 
$24.5 million. 

‘Two problems had to be sorted 
out as the system was being built. 
One was figuring out how to make 
256TB of total hard-disk space 
across the 950 nodes appear as one 
seamless storage area. This was 
solved by using and tweaking the 
Lustre global high-performance 
file system from Cluster File Sys- 
tems Inc. in Mountain View, Calif. 
Also difficult was creating an air- 
conditioning system powerful 
enough to cool the massive, hot- 
running machine. 

Barton Miller, a professor in the 
computer sciences department at 
the University of Wisconsin - 
Madison, says this kind of super- 
computer is just what scientists 
need to test the stability of stored 
nuclear bombs, for example, or 
drug interactions in genetics re- 
search, he says. 

“They can’t test these things out 
in a meaningful way [in a lab], so 
you do it using simulation,” Miller 
says. “It’s changed the way people 
do research.” D 
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Bookseller 
Expands its Reach 


With Integrated 
Internet Platform 


Oxford Bookstore project leaders, COO 
Sanjeev Mehra (left) and CEO Priti Paul 


BY JAIKUMAR VIJAYAN 

Since it first opened its doors in 
1920, Oxford Bookstore, a small 
bookshop in the heart of Calcut- 
ta’s business district, has been a 
favorite destination for book 
lovers. And while the store had al- 
ways done a brisk business, for 80 
years patrons were able to find 
their literary treasures only at its 
sole location in India. 

In 2000, management at Apee- 
jay Surrendra Group — an indus- 
trial conglomerate that now owns 
Oxford Bookstore — decided to 
expand the business to reach cus- 
tomers in other major Indian 
cities. The challenges were huge, 
says Chief Operating Officer San- 
jeev Mehra. 

For starters, the idea of a chain 
store for book retailing was some- 
what alien in a country where na- 
tional consumer chains are still a 
rarity. The communications and 
logistics infrastructure was poor, 
and there was no information 
available on the book-purchasing 
habits of consumers in the metro- 
politan areas of India. 

“Chain-store retailing had just 
about started in India [in 2000],” 
Mehra says. As a result, much 
of the infrastructure and infor- 
mation required to deliver the 
economies of scale that retail 
chains need was missing, he says. 
“At that time, the Internet seemed 
to be the best bet” to address 





some of these issues, Mehra says. 

As it began its expansion into 
other cities, the company decided 
to launch an integrated Internet 
platform that would tie new brick- 
and-mortar shops back to the 
mother ship in Calcutta. It would 
also open up an online presence 
for the bookseller, says Niloy 
Mukherjee, the project’s technical 
architect. 

In that sense, Oxford’s initiative 
was different from those of com- 
panies such as Amazon.com Inc., 
which started as an online store, 
or Barnes & Noble Inc., which al- 
ready had an established retail 
presence when it launched its on- 
line store, Mehra says. 

Three years into the effort, the 
project has begun to pay off. Ox- 
ford opened new retail stores in 
three Indian cities and recently 
launched a fourth in the southern 
city of Bangalore. Its retail Web 
site was one of the first in the 
country to accept credit card 
payments. 

The underlying Internet system 
that has driven much of the ex- 
pansion was built by Cognizant 


| Technology Solutions Corp., a 


Teaneck, N.J.-based provider of 
outsourced services. The three- 
tier architecture features Micro- 
soft Corp. servers running Active 
Server Pages at the front end, ap- 
plication servers running Internet 
Information Server software in 
the middle tier and Oracle Corp. 
database server software at the 
back end, says Mukherjee, who 
works at Cognizant. 

The system gives Oxford a single, 
consolidated view of its online and 
retail store operations around the 
country. For example, the company 
can use it to centrally track sales, 
consolidate orders, replenish in- 
ventories, study purchase trends 
and forecast sales across both phys- 
ical and online stores. New stores 
immediately become part of the 
network when they plug in. 

The integration of its online and 
physical store operations has yield- 
ed other benefits as well. For in- 
stance, Oxford is able to serve up 
personalized service at its retail 
stores for customers who have pur- 
chased from its Web site. 

“If we didn’t have the system, it 
would have been chaotic to set up 
stores,” Mehra says, adding that 
this approach “has allowed us to 
achieve better costs, control, secu- 
rity and audit.” D 
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OPINION QUOTE OF THE WEEK 


Road to IT Renaissance & We’ve had tapes that were in the 
Columnist Paul A. Strassmann bottom of a Dumpster swimming 
says that Web services will in Dumpster juice. That was gross, but 
change both IT and the power it was a good recovery.” 

structure within organizations. - Dan Gardner, vice president of development, 
Page 38 Renew Data Corp. 


SECURITY MANAGER’S JOURNAL 


Kazaa Gets the Boot 

A directory integration project trips over nu- 
meric user names, but Mathias Thurman moves 
forward in blocking the use of file-swapping 
programs on the corporate network. Page 36 
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POWERS 


GE SALES 


Asales portal integration project at GE Power has 
substantially increased productivity, giving the 
sales team more time for calls. By Gary H. Anthes 


IT WAS SEPTEMBER 2001, and Jeff Im- 
melt had just become General Electric 
Co.’s new chairman. His predecessor, 
Jack Welch, had come up through the 
engineering ranks, but Immelt was 
a marketing guy, and one of 

his first actions was to survey 

the company’s sales force. He 

was dismayed to find that mem- 
bers of the sales team were 
spending far more time on 
deskbound administrative chores than 
in face-to-face meetings with cus- 
tomers and prospects. 

“He put a personal challenge before 
all the business units,” recalls Venki 
Rao, an IT leader in global sales and 
marketing at GE Power Systems, an 


ee 


| Atlanta-based division focused on en- 
ergy systems and products. “He said 
we needed to turn that around, to 
spend four days a week in front of 
the customer and one day for all the 
admin stuff.” 


FRAO) shee goat te tis making prog: 


REPORT ‘ ress, thanks to a new sales por- 


tal that went live in April last 

year. The portal, a complex 
amalgam of products that pulls infor- 
mation from multiple data sources, 
was developed in just six months, 
thanks in part to its high-level spon- 
sorship and the use of an IT project 
methodology based on GE’s Six Sigma 
quality program. 





GE Power’s salespeople spent much 
of their time at their desks because 
they had to go to many sources — 
some manual and some electronic, 
some internal and some external — for 
the information needed to sell multi- 
million-dollar turbines, turbine parts 


| and services to energy companies 


worldwide. Now, Rao says, they have a 
“one-stop shop” for just about every- 
thing they need. 

Various existing GE databases, pre- 
viously unconnected, are the primary 
data feeds into the portal, providing 
everything from sales tracking and 
customer data to parts pricing and in- 
formation on planned outages. GE 
Power also added external data such 
as news feeds. 

“T have the sales portal as my home 
page, and I use it as the gateway to all 
the applications that I have,” says Bill 
Snook, a sales manager at GE Energy 
Services in Canada and one of 2,500 
users of the portal. “Before, you were 
randomly searching for things. I'd go 
to a site, and if it didn’t have the an- 


| swer, I'd go to another site.” Snook says 


he used to go from one application to 
another, and each required a separate 


| sign-on and password. The portal has 


“made multitasking much more effi- 
cient” and has increased face time with 


| customers, he says. 


The heart of the system is the Java- 
based Epicentric Foundation Server 


| from Vignette Corp. in Austin. This 

| portal software gives users a single 

| unified view into a wide variety of in- 
| formation sources and applications. It 
| dynamically assembles personalized 

| “portlets,” such as a customized view 


of industry news, a look at the user’s 


| own customers or his sales perfor- 


mance year-to-date, and presents 
them in a unified way to the user’s 

Jeb browser. 

GE Power uses BEA WebLogic Serv- 
er from BEA Systems Inc. in San Jose 


| for the front-end Web server func- 


tions. A product for single sign-on, 
SiteMinder from Netegrity Inc. in 
Waltham, Mass., gets users into the 


THE PAYOFF 


(a 
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TOM CEROVSKI, sales digitization 
leader at GE Power Systems, says the 
sales portal and other automation efforts 
have increased the productivity of the 
sales force by some 25%. “Salespeople 
are spending less time searching for infor- 
mation,” he says. 

The portal has also resulted in some un- 
expected benefits. “As we built the data 
mart underneath the portal, it became 
clear that we could leverage that data for 
management as well,” says Samir Saini, IT 
sales program manager. “So we built mod- 
ules geared for performance manage- 
ment.” Sales managers can now look at 
data such as sales leads, orders and re- 
ceivables; and they can generate reports. 

At GE, a project must have at least a 
2-to-1 payback. Venki Rao, an IT leader in 
global sales and marketing, says GE Power 
spent $150,000 for software licenses, but 
he declines to quantify other costs. Jim 
Young, a former GE consultant who worked 
on the project, says, “The global sales por- 
tal came in at a very stingy $1.2 million.” 

As for the financial benefits, Cerovski 
says that with a 50% annual return on in- 
vestment, the project “will achieve the tar- 
get 2-for-1 investment payback.” 

~ Gary H. Anthes 
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sales portal and to multiple applica- 
tions behind the portal using just one 
password. At the bottom of the three- 
tier architecture sit various Oracle 
Corp. and Siebel Systems Inc. databas- 
es running on mammoth Sun Micro- 
systems Inc. Solaris servers at the 
company’s Cincinnati data center. 

The sales portal sits on top of an Or- 
acle data mart created specifically for 
it. The system pulls data needed in real 
time, such as updates to the customer 
master file, into the mart using special 
“adapters” created with the Integration 
Platform from webMethods Inc. in 
Fairfax, Va. 

The adapters connect to a variety of 
applications and database types. GE 
Power loads data updates that are 
needed less often, such as turbine in- 
stallations, once a week using an ex- 
tract, transform and load process. 


Passing the Toll Gates 
GE Power kicked off the project in 
September 2001, had a pilot portal run- 
ning by January 2002 and had the pro- 
duction system up three months later. 
Project managers say much of that 
rapid deployment stemmed from the 
use of the company’s life-cycle Project 
Management Methodology (PMM). 
PMM, which draws on the principles 
of GE’s Six Sigma quality practices and 
principles, divides the development 
process into six phases, each of which 
ends at a “toll gate” that must be 
passed before the next phase begins. 
One of the more rigorous steps in 


WINDOW 
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the PMM is the evaluation and selec- 
tion of vendors. 

The portal software was evaluated 
against two dozen technology criteria, 
says Jim Young, president of Infotech 
Consulting Inc. in Atlanta and a former 
GE Power consultant who served as 
one of the project managers during the 
development process. 

The most important criteria were 
cost, the ability to run the portal on 
multiple application servers and oper- 
ating systems, and ease of integration 
with Verity Inc.’s search engine, with 
other GE applications, with tools like 
webMethods’, and with standards such 
as XML, HTTP and SOAP. 

Epicentric nosed out portal products 
from IBM, Computer Associates Inter- 
national Inc., Plumtree Software Inc., 
iPlanet (now part of Sun), BEA and Or- 
acle, Young says. It was chosen largely 
for its ease of integration; ability to 
span multiple, heterogeneous databas- 
es; and ability to be customized by end 
users, he says. 

“A huge criterion for GE was they 
wanted the power in the hands of 
users: salespeople and management 
staff,” Young says. “And as you go 
across the enterprise, you want to go 
across lots of different products, lots of 
different databases and not have to go 
back to IT.” 

Young says GE Power experienced 
some difficulties because it was under 
pressure to bring up the portal at the 
same time that other important pieces 
of software, including the Netegrity 





By integrating information from several ERP systems 
and data warehouses into a single view, GE Power's 
sales portal has improved staff productivity by 25%. 


as 
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single-sign-on software and the Verity 
search engine, were being introduced 
at the company. 

For example, because single sign-on 
wasn’t in place for all the applications 
that the sales portal needed to touch, 
the portal had to check user permis- 
sions by going directly to some appli- 
cations using the Lightweight Directo- 
ry Access Protocol (LDAP), rather 
than to a single table in SiteMinder. 


Security Issue 
“Because Epicentric could go to either 
Netegrity [SiteMinder] or LDAP, it pre- 
sented a small security issue internally, 
but there was no other way to do it,” 
Young says. Nevertheless, 
he says, the issue was re- 
solved by the time the 
portal system went into 


production, and all per- portal project: 


missions are now verified QuickLink 38429 
www.computerworld.com 


via the authorization table 
in SiteMinder. 

The hardest part of the project was 
getting past the first two Six Sigma toll 
gates: project definition and cost-bene- 
fit measurement, Rao says. Defining 
requirements was tough because the 
sales portal’s primary users are sales- 
people scattered around the world. 
Also, the system was intended to ad- 
dress the needs of disparate sales 
groups throughout GE Power. 

“Because Power Systems has nine 
different businesses, you have to go 
and sell it to each and every business 
leader,” Rao says. 
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The project team used a kind of 
rapid prototyping — a “launch-and- 
learn process,” as Tom Cerovski, sales 
digitization leader, calls it — to focus 
and win the minds of the sales force. 

“For example, we say we are going 
to focus on cash and receivables, and 
so we put cash and receivables metrics 
on the portal and start getting feed- 
back immediately,” he explains. “If 
we spent a month putting something 
rough together, about three months 
later we'll have it fine-tuned based on 
the feedback.” 

Developers also put portal proto- 
types on PCs in the common areas at 


the company’s annual sales conference. 
dahaaie ae Salespeople could take a 
THE SIX SIGMA EFFECT 


Here's how GE Power's Six Sigma 
quality program shaped its sales 


quick look and then type 
in their reactions and 
suggestions, Rao says. 

The open architecture 
and flexibility of the 
sales portal software 
make it especially easy 
to enhance and extend it, and GE Pow- 
er plans to do so, Rao says. Over time, 
his group plans to add new tables and 
new fields to existing tables the portal 
accesses. 

For example, travel and living ex- 
penses could be automatically loaded 
into the data mart, and the portal could 
show those expenses for individual 
salespeople or roll them up for group 
or regional management review. Future 
customizations could even include ex- 
tranet extensions to customers and 
sales channel partners, Young adds. D 


Cer oe 





slalemicla 


d and new. 


and again. 


e informa agement so 
is, or wha see it all, 4 
nd build o already ha 


pb. Fora DG e Informatid 





34 COMPUTERWORLD June 2, 2003 


As vice president of de- 
velopment at Renew 
Data Corp., an electron- 
ic evidence and data re- 
covery services provider 
in Austin, Dan Gardner 
played the leading role 
in the development of 
the company’s propri- 
etary forensic and data 
recovery software. Gardner recently 
spoke with Computerworld’s Lucas 
Mearian about data recovery best prac- 
tices, how Renew Data restores lost data 
and how administrators can minimize 
the risk of data loss. 


What should administrators do when faced 
with a storage media failure? Our advice is 
if the hard drive is making a noise or a 
tape is stopping, don’t try to fix it your- 
self. Once the media starts to fail, it’s got 
a pretty limited lifetime. I recommend 
pulling the plug. Powering down can 
take time and cause further damage. 

Don’t be hasty to try things that may 
cause further damage, or don’t try 
things that may cause logical damage 
or data loss. It doesn’t cost a nickel to 
call us and just get a quick assessment 
of whether or not there is a data recov- 
ery scenario involved. 


What can IT do to protect against the most 
common causes of data loss? One point 
that gets overlooked in policies and 
procedures for disaster recovery is 
testing. There’s an old saying, “One 
test is worth a thousand opinions.” 


Which types of problems are the toughest to 
remedy? By far, the physical damage. 
These types of things involve taking it 
into a clean room and trying to attempt 
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a repair of what’s repairable and then 
attempting to read what’s readable. It’s 


| very labor-intensive and requires the 
| skill of someone who knows what 
| they’re doing in order to manipulate 


the hardware into a readable state. 


At what point do you decide that data is un- 
recoverable? Generally speaking, we 

don’t give up. There’s obviously clear 
situations, like when all the magnetic 


pi ( cers 


Title: Vice president of 
development, Renew 
Data Corp. 


Accomplishments: 
Gardner has a master’s 
degree in mathematics 
and is the primary ar- 
chitect of the compa- 
ny’s forensic/data re- 
covery software tools. 
He previously held 
engineering positions 
at Ontrack Data Inter- 
national Inc. (now 
Kroll Ontrack Inc.) in 
Eden Prairie, Minn., 
and Progressive Data 
Recovery LLC in 
Minneapolis. 





substrate is scrapped off platters, when | 


it’s obvious. As long as there’s an out- 
side chance of getting something, we 
continue. 


What other types of media can you recover? 
Things like flash cards from the digital 
cameras, SmartMedia, Memory Sticks, 
{and] all forms and manner of remov- 
able storage, such as floppies, optical 
drives, Zip drives, Ditto drives, CD and 
DVD media. 


What can administrators do to reduce vul- 
nerability to media failures? Given the fact 
that there is a certain failure rate 
among all backup media, you need to 
audit that media. Make sure it works. 
Make sure you backed up what you 
think you backed up. Make sure you 
can restore what you've backed up. 
We've seen backup tapes come in un- 
der the assumption that they’ve backed 
something up but never actually did. 

That’s a really tough thing to tell 
customers. They send in a tape for data 
recovery because they can’t restore a 
certain file, and we tell them we can’t 
either because it wasn’t there in the 
first place. 


If forensic evidence needs to be preserved, 
what do you do that IT can’t with a forensic 
disk-imaging software package? That re- 
volves not so much around capability 
but around legal conditions. We bring 
in an objective third party if we're talk- 
ing about evidence, because there’s a 
real credibility issue there. There are 
chain-of-custody issues that require 
someone being a witness. 

From a technology point of view, 
EnCase is the standard in the forensics 
area and therefore it’s used by investi- 


How to Cut Your 
DataLosses 


Data recovery specialist Dan Gardner offers tips on 
how to avoid losing data and what can be done when 


disasters happen. By Lucas Mearian 


www.computerworld.com 


Top 10 Causes 
Of Data Loss 
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gators. But our people are also very well 
trained on the whole chain-of-custody 
issue, which generally IT people aren't. 


What were some of your more unusual suc- 
cesses? We’ve had tapes that were in 
the bottom of a Dumpster swimming 
in Dumpster juice. That was gross, but 
it was a good recovery. 

Some of the most challenging recov- 
eries we've done involved proprietary 
systems, like GE’s MRI systems, where 
from a computer point of view, it’s not 
in the mainstream [and] there’s a pretty 
hefty amount of work involved in deter- 
mining how to get data off the media. 


How quickly can you restore my data? 
There’s a number of possible scenar- 
ios. If we're talking about single hard 
drives, first we have to assess if there’s 
anything physically wrong. If the mag- 
netic media on the platter has been 
damaged and completely scraped off, 
that’s an unrecoverable scenario. 

Generally, it’s one day for the initial 
process of reading the data, and then 
it’s another day for processing the data, 
and then it’s another day for restora- 
tion of data on return media. 


What's it going to cost me to get my data 
back? The most common scenario is a 
single hard drive. Depending on the 
type of failure, whether it’s a logical 
failure or to a severe physical failure, 
it’s between $300 and $2,000. B 
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Single Sign-on Stalls as 
Kazaa Gets t 


Numeric user names derail directory integra- 
tion work, but a network redesign enables 
blocking of bandwidth-hogging file-swapping 
programs. By Mathias Thurman 


INCE MY ACTIVATION | 
by the Air Force Re- 
serve, I’ve had to dedi- | 
cate almost all of my 
time to my new duties. For | 
now, I’m in a location stateside 
that has Internet access, so I 
can log into my corporate 
LAN to check e-mail and ac- 
cess server resources. I’ve also 


factor token-based authentica- 
tion. We configured these to 
recognize standard user 
names that conform to our 
network log-ins. 

To add to the complexity, 
we use Windows 2000’s Ac- 
tive Directory to store net- 
work log-in credentials. We 
use these credentials to log 


been able to dial into several into the Microsoft Exchange 
meetings on projects Server e-mail sys- 


that I’ve been manag- 
ing or that I’m con- 
tributing to. 

One such project 
involves creating a 
centralized authenti- 
cation system for our 
Solaris servers. We’re having 
problems with Novell eDirec- 
tory and its ability to effective- 
ly handle authentication re- 
quests from those servers. 

One of the issues involves 
user names, which are typical- 
ly based on a simple naming 
convention such as the first 
letter of the user’s first name 
followed by his last name. 
However, my company’s hu- 
man resources department de- 
cided to use employee num- 
bers as user IDs for access to 
the PeopleSoft system. My 
team uses eDirectory to store 
those numeric user names, 
and we want to use the same 
eDirectory system for our 
Unix authentication so em- 
ployees have single sign-on 
access to any resource. Unfor- 
tunately, it appears that Solaris 
doesn’t like user names made 
up of only numbers. I’ve been 
told that some Solaris authen- 
tication modules may not 
work with such names. 

Another problem involves 
our RSA SecurID servers, 
which are responsible for two- 
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tem and to access 
Windows file-server 
drive shares. The 
PeopleSoft log-in is 
for access to HR and 
payroll services. 
We'll probably 
configure the eDirectory to 
have two user name attributes: 
one for PeopleSoft and the 
other for Unix authentication. 
The beauty of directory ser- 


| vices is that the rest of the at- 


tributes, such as the user’s 
home directory, default shell 
and group, can remain and be 
correlated to the Solaris user 
identification without affect- 


| ing the PeopleSoft log-in. 


Another issue involves So- 


We could configure 
our firewalls and 
routers to block 
access to... unau- 
thorized applica- 
tions and Web sites. 
The problem is that 
they’re not unautho- 
rized for everyone. 





laris 8 incompatibility with 
eDirectory. To resolve this 
problem, we were planning on 
using either Novell’s DirXML 
or the PADL open-source li- 
braries, a Lightweight Directo- 


| ry Access Protocol (LDAP) in- 


tegration tool from Mel- 
bourne, Australia-based PADL 
Software Pty. We could solve 
the problem by upgrading to 
Solaris 9, since that version’s 
LDAP client works better with 
eDirectory. But that migration 
is at least a year off, so for now 
we have to make do. 

I’ve just learned that Sun 
has released a patch for its 
Solaris 8 LDAP client that 
improves compatibility with 
eDirectory, but I don’t have 
much information on that yet. 


Network Abusers 


I’m also working on a project 
to control the abuse of instant 
messaging and file-sharing 
programs. Our general coun- 
sel has signed off on a policy 
that prohibits employees from 
using company resources for 
nonbusiness activities. Read- 
ing our intrusion-detection 
logs, we discovered that most 
of the abuse comes from users 
of Yahoo Messenger and file- 
sharing programs like Kazaa 
and Morpheus. The use of 
these programs reduces pro- 
ductivity, ties up network 
bandwidth and raises security 
issues when employees down- 
load files infected with spy- 
ware or viruses. 

We could configure our 
firewalls and routers to block 
access to those unauthorized 
applications and Web sites. 
The problem is that they’re 
not unauthorized for every- 
one. For example, our techni- 
cal support group uses Yahoo 
Messenger extensively to help 
customers with software prob- 
lems, and IT security needs 
access to hacker Web sites for 
research purposes. 





he Boot 


We also haven't been able to 
block users’ access by IP ad- 
dress because we use a Dy- 
namic Host Configuration 
Protocol server, which gives 
users a different IP address 
every time they log on. Also, 
we use a single range of IP ad- 
dresses for all corporate cam- 
pus PCs, so we can’t even 
block a range of addresses 


| . . 
from accessing these services. 


The good news is that our 
network department has start- 
ed redesigning the IT infra- 
structure and is segmenting 
the network. Network opera- 
tions, engineering, quality as- 
surance, security, HR, finance 
and many other departments 
will each have their own range 
of IP addresses. That will 
make is possible to configure 
our firewall or router access- 
control lists by department. 

We will be able to block ac- 
cess not only to illegal pro- 
grams, but also to legitimate 
applications for users outside 
a given department. The net- 
work team will be able to con- 
figure the firewall to, for ex- 
ample, prevent tech support 
from accessing the payroll ap- 
plication — and to prevent 
everyone except the tech sup- 
port group from using Yahoo 
Messenger. At our next meet- 
ing, we will discuss how to re- 
strict access to even more 
unauthorized Web sites. 

Meanwhile, as military 
needs wind down, I’m hoping 
for an early release from my 
Reserve duties. I hope to be 
writing the next column from 
my home office. D 


WHAT DO YOU THINK? 


This week's journal is written by a real 
security manager, “Mathias Thurman,” 
whose name and employer have been 
disguised for obvious reasons. Contact him 
at mathias_thurman@yahoo.com, or join the 
discussion in our forum: QuickLink a1590 


To find a complete archive of our 
Security Manager's Journals, go online to 
computerworld.com/secjournal 
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Redline Announces 
Wireless Device 


Redline Communications Inc. in | 
Markham, Ontario, last week an- 
nounced a long-range broadband 
wireless device designed to re- 
place leased Ti lines. The AN-30T 
provides up to four time division 
multiplexing links by using Ortho- 
gonal Frequency Division Multi- 
plexing at up to 72Mbit/sec. It 
works in the unlicensed 5.8-GHz 
band and functions at distances 
greater than 50 miles. The AN- 
30T will ship by the end of June. 
Pricing wasn’t disclosed. 


IBM Launches 
Low-end Server 


IBM iast week introduced the 
eServer p615, a new low-end 
server that includes a Power4+ 
processor running either Linux or 
IBM’s AIX operating system. The 
server, which can be equipped 
with one or two processors, is 
priced beginning at $5,745. 


| 


Emulex Integrates 
HBAs with Brocade | 


Emulex Corp. in Costa Mesa, 

Calif., last week announced that 

its LightPulse LP9802 and 

LP982 PCI-X host bus adapters 
(HBA) have been tested to work 
with Brocade Communications 
Systems Inc.’s line of storage- | 
area network switches. The HBAs | 
offer 30% more 1/0 processing 
power than previous models and 
are backward-compatible with 
existing 1GB/sec. and 2GB/sec. 
Fibre Channel Peripheral Compo- 
nent Interconnect installations. 


SAP Apps Joined 
With Dassault Tools | 


SAP AG announced last week 
that it was integrating its mySAP 
Product Lifecycle Management 
application with Dassault Sys- | 
temes SA’s CATIA V5 product de- 
velopment software. SAP claims 
this will allow manufacturers to 
more easily collaborate with part- 
ners and suppliers on engineering 
and procurement. 
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Web Services: Road 
‘lo TT Renaissance 


N MY MAY COLUMN, I discussed why the enter- | 


prise computing solutions investment cycle was 
coming to an end, to be displaced by Web ser- 
vices [QuickLink 38250]. Unfortunately, a techni- 
cal description of how Web services function 
doesn’t explain why we’ve entered a new evolutionary 
stage in how computing will affect organizations. 
The idea that computing has evolved over several 
cyclical stages is now accepted wisdom. Various au- 
thors have discerned a succession of three-, four- or 


even eight-stage cycles 
since 1950, depending on 
how they sliced up the 
written record. Whenever 
the computer industry ex- 
periences one of its period- 
ic slumps (about every six 
to eight years) the gurus, 
investors and entrepre- 
neurs engage in a guessing 
game of what will be the 
next cycle to spawn yet an- 
other bonanza. 

Almost everyone agrees 
that technological innova- 
tion is needed to bring about the next 
growth cycle. There is also a consen- 
sus that the next wave will have some- 
thing to do with Web services. How- 
ever, just tagging Web services as the 
engine to create another round of 
trillion-dollar investment is a dead 
end. For the next cycle to happen, 
CEOs and CFOs will demand demon- 
strable gains in added value. 

In this environment, anything 
tagged as a technological improve- 
ment won't sell in the boardrooms. 
Therefore, market planners and con- 
sultants are repackaging Web services 
as “customer-centric computing,” 
“human-centered computing,” “ubiq- 
uitous computing” and so forth. This 
emerging list of hyphenated labels 
suggests that the control over IT will 





migrate closer to the cus- 
tomer. Such reshuffling 
will be enormously expen- 
sive because it will require 
junking much of what’s in 
place right now. 

The real story is that the 
next wave of IT invest- 
ments will shift much of 
the control over IT from 
the producers of IT (ven- 
dors, CIOs, consultants) to 
those who can decide 
what information is worth 
getting in order to do their 

jobs more effectively. When I talk 
about Web services, I really mean a 
practical demand for CIOs to restruc- 
ture technology to ease the traumatic 
shifts from supply-side economics to 
demand-side economics. 

I’m sure that there will be many de- 
bates about whether such a transfor- 
mation will actually happen, and if so, 
how rapidly. Before making predic- 


| tions, it’s useful to examine how em- 


ployees will acquire the capabilities to 
decide what information to obtain and 
how much to pay for it, and those are 
tough questions. 

Moving decision-making about the 


| uses of IT calls for a radical cultural 


change. Right now, with the exception 
of what they fix up on their PCs, em- 
ployees are largely force-fed from a 





menu that has been cooked by a few 
decision-makers, mostly technolo- 
gists. The current organization of IT 
is like a 13th century European town, 
where the local guilds and the bishop 
decide what people may wear and dis- 
cuss. Introducing a Wal-Mart of 
choices into such a setting is likely to 
upset those who hold power. 

But Web services must be seen not 
just as a technologically advanced 
method for managing and distributing 
information. Internets and intranets 
must also be understood as an instant 
marketplace where individuals can 
exercise a wide range of choices about 
what information to acquire and how 
to take advantage of an enormous 
variety of information-processing 
capabilities. 

If the exercise of individual choices 
is the key to the empowerment of a 
vastly more productive information 
workforce, we must set out now to lay 
the foundation for a software architec- 
ture that will make that feasible. 

After an examination of what is ac- 
tionable now, I have concluded that 
vendor-independent portal technology 
will be one of the principal means of 
making Web services valuable. CIOs 
should go back to their architectures 
and remove vendor-specific ways in 
which people are forced to interface 
with applications. 

In their place, CIOs should promote 
the adoption of generic and universal 
portals that can be adapted to employ- 
ees’ scope of work, skills, literacy and 
habits. 

I see infinite opportunities for the 
expansion of Web services if people 
are offered the opportunity to shape 
their portals as a friendly companion 
for trips into the world of networked 
knowledge. B 


WANT OUR OPINION? 


For more columns and links to our archives, go to 
www.computerworld.com/opinions 
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QUOTE OF THE WEEK 
4 A few years ago, people got 


OPINION HOW TO 


| The ROI of Privacy Seals Talking Long-Distance 
jobs just by having certifications. ; BBB privacy logos on Web sites As more companies conduct job inter- 
Today, you’ve got to be able to break wae) aren't cheap, but they might be views by phone to save time and money, 
down your accomplishments and | . worthwhile in boosting con- job candidates need to make the best 
provide specific ROI. | sumer confidence, says privacy impression they can. Here’s some advice 
- Jeff Markham, manager, Robert Half Technology | columnist Jay Cline. Page 42 for handling those calls. Page 41 
| 





0 YOU BUY? OR DO YOU BUILD AND ADJUST? 
: It is an elder among IT debates. It is 
our own “Tastes great!” “Less filling!” 
When you need a new enterprise soft- 
) ware tool, what’s wiser: buying a pack- 
ea aged application from a major vendor and 
customizing as needed? Or developing it yourself 
from scratch? Interviews with IT leaders show this 
conundrum is no closer to resolution today than it 
was a quarter-century ago. But that doesn’t mean 
that things haven’t changed. 

Build advocates need only wave a fistful of Com- 
puterworld articles dating back to the mid-1990s, 
when enterprises discovered the joy of ERP. It is 
hardly a secret that many ERP, CRM and supply 
chain management implementations have blown up 

— wasting millions, causing corporate turmoil for 
years and, in a few cases, being named as factors 
in bankruptcies. Moreover, CIOs and business 
executives alike have grumbled in recent 
years that even when such projects “suc- 
ceed” (that is, when they don’t fail utterly), 
return on the investment comes slowly — 
if at all. 
On the other hand, there’s clearly a limit 
on how large an application IT can create. 
“You don’t see enterprises trying to re-create SAP,” 
jokes Jennifer Chew, an analyst at Forrester Research 
Inc. in Cambridge, Mass. Many of the applications 
C1Os point to as triumphs of the build philosophy 
are relatively modest — making data easier for users 
to access via a browser, perhaps, or allowing previ- 
at >t haroOan | ously isolated software tools to communicate with 
ate D a one another. 
2 id. 4. dy 0- So what'll it be, buy or build? Some of today’s argu- 
A i bui d: l ments may surprise you. 





sates contin ane :| Buying and Crying 
2| Rich Bursek, CIO and senior vice president at Lydian 
=, By Steve Ulfelder <| Trust Co., recently made the decision to buy a pack- 


aged application, and the process reinforced his phi- 


losophy to build his own software 
whenever possible. 

Lydian, a Palm Beach Gardens, Fla.- 
based parent company to several finan- 
cial-services businesses, needed Web- 
based mortgage-origination software 
that the lenders use to receive and 
process loan requests. Many vendors 
offer mature applications that fill this 
vertical need. “It would have taken us a 








40 COMPUTERWORLD June 2, 2003 


MANAGEMENT 





year to build it” at a cost of about $1 million, Bursek 
says. The price of the packaged application selected 
by Lydian (Bursek declined to name the vendor be- 
cause the contract has yet to be locked in) is about 
$250,000, he says, and another $250,000 in resources 
— in-house developers’ time and consulting — is 
needed to get the application running. 

The capper is that Lydian hopes to put the pack- 
aged application in production in six months. “So 
that’s a half-million-dollar savings, plus we’re six 
months closer [to a functioning application],” Bursek 
says. “When I took those two factors to the board, it 
was pretty persuasive.” 

While the 50% savings made this a clear-cut buy 
decision, Bursek discusses the experience with en- 
thusiasm usually reserved for a pulled groin. Lydian’s 
senior management team has a strong IT background 
and prefers to build applications whenever possible 
— and despite the overwhelming cost advantage of 
purchasing packaged mortgage-origination software, 
this experience is doing little to change their minds 
about the non-finance-related advantages of the 
build approach. (Bursek believes the 
unpleasantness isn’t his specific ven- 
dor’s fault, but rather the nature of the 
buy beast.) 

In January, after running the numbers, 
Bursek knew he would purchase a pack- 
aged application and began vendor 
meetings. “That took us a month, which 
everyone told us was very aggressive, 
and another [month] to negotiate and 
sign the contract,” he says. (As noted 
above, there are still T’s to be crossed, 
I’s to be dotted.) The software was in- 
stalled in March and was scheduled to 
go live May 1. 

“We have five people dedicated to 
managing this project,” Bursek groans. 
“Five dedicated resources doing nothing 
else.” Three are business analysts who 
act as conduits between Lydian’s busi- 
ness units and IT, and two are develop- 
ers writing code to make sure the company’s existing 
applications work with the new mortgage-origina- 
tion software. “When you’re working with vendors 
there’s this ongoing battle,” Bursek says. “Things 
snowball; you can lose control.” He contrasts this ex- 
perience with a recent build project — an extranet 
sales tool for third-party brokers and account execu- 
tives who do business with Lydian. 

The company needed to give those professionals 
real-time, browser-based access to mortgage ap- 
proval status. Bursek simply grabbed a few develop- 
ers from his six-member team and went at it. “I met 
with an analyst and a systems architect” to sketch out 
the basics, he says. “Then we made a presentation to 
two people in operations and started development 
the same week. From problem analysis to going live 
took three weeks.” 

Bursek shakes his head. “With vendors, it’s just 
a grueling process.” In particular, he chafed at the 
vendor selection process, the contract negotiations 
and the need to rely on outside developers. But in the 
case of the mortgage-origination software, the mas- 
sive price differential trumped all other arguments 
and made the buy decision unavoidable. 





RICH BURSEK, senior 
vice president and CIO, 
Lydian Trust Co. 





Customize With Caution 


One of the popular build arguments is 
that there’s really no such thing as a ma- 
jor packaged application — vendors’ 
suites must be customized so heavily 
that getting your allegedly off-the-shelf 
application running requires a massive 
amount of developer time and a shotgun 
wedding with an integrator. But some IT 
leaders turn this argument inside out. 
According to David Schwartz, CIO at 
George Washington University in Wash- 
ington, the big problem with ERP imple- 
mentations is that companies overcus- 
tomize software. “A lot of these modifi- 
cations are simply preferences,” he says. 
“People change the way a screen looks or 
what appears on a report.” 

“If you buy packages, you want to keep 
customization to an absolute minimum,” 
agrees Chuck Mackey, IT director at the 
Elkay Division of privately held Elkay 
Manufacturing Co. in Oak Brook, III. 

The diversified manufacturer of 
plumbing products and cabinets built its 
own software until 1997, when it put in 
place a PeopleSoft Inc. ERP suite. And 
despite a lousy experience with a sys- 
tems integrator (Mackey declines to 
name the firm but says, “They did a very 
poor job for us”), he has no regrets. 
Elkay’s annual PeopleSoft maintenance 
fee is equivalent to two or three develop- 
ers’ salaries, Mackey estimates. And for 
that fee, he says, “today we’re totally 
Web-enabled. There’s sure no way we 
would have gotten here with two or 
three more developers.” 

In 2000, when George Washington em- 
barked on an implementation of an Ora- 
cle Corp. ERP suite, Schwartz minimized 
customization and instead updated the 
university’s business processes to match 
best practices recommended by Oracle. “That's 
tough. You go through a chain of pain when you're 
re-engineering and changing corporate culture,” he 
says. “But now our systems reflect recognized best 
practices.” 

Working with systems integrator BearingPoint Inc. 
(formerly KPMG Consulting Inc.), the university im- 
plemented the ERP suite in two years at a total cost 
of $25 million, Schwartz says. Between George Wash- 
ington developers, BearingPoint consultants and 
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straightforward applications that a small team of 
developers can handle quickly. 


major ERP and CRM suites - why reinvent the wheel? 
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The last 
thing we 
wanted to do 
was build this 
app ourselves. 


ClO, Marcus & Millichap 
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line-of-business representatives, the im- 
plementation team numbered 50 to 60. 
Schwartz claims there are Ivy League 
colleges (which he declines to name) 
“that paid two or three times” $25 mil- 
lion because they went wild on cus- 
tomization. 


Build If You Must 


“The last thing we wanted to do was 
build this app ourselves,” says Rick 
Peltz, CIO at Marcus & Millichap. Late 
last year, the Encino, Calif.-based real 
estate investment brokerage company 
shopped around for off-the-shelf tools 
that would let its sales agents pull data 
from many sources (photos, published 
articles, government information and 
others), use it to generate marketing 
packages for individual properties and 
send that information back to the com- 
pany’s SQL Server database. Peltz as- 
sumed that he would use Microsoft Corp.’s Power- 
Point, a tool the agents were familiar with, as a front 
end. Surely it would be simple to find a package that 
could send the data back to headquarters. 

But even with his two consultants “on the phone 
all the time with Microsoft” trying to pull something 
together, Peltz found that PowerPoint’s architecture 
made it impractical to set up a way to prevent users 
from deleting information they had created. This fea- 
ture was a must-have; turnover among real estate 
agents is high, and many are technology neophytes, 
so Peltz was concerned that users would accidentally 
delete marketing packages they had just created. 

As a result, Marcus & Millichap was forced to 
spend its budget ($250,000 to $500,000) “to re-create 
PowerPoint from a [user interface] perspective, but 
without all the functionality,” Peltz says — and with 
the ability to build “whiteboard” fields that users 
can’t delete. While the company would have pre- 


| ferred to buy a packaged application, Peltz did find 


some advantages in building his own. Four months 
after work began, the tool was already being beta- 
tested because Marcus & Millichap set its own ag- 
gressive timetable. And the consultants who were 
initially earmarked for integrating packaged software 
have instead been writing code and auditing one an- 
other’s work. 

About the only thing that’s certain in enterprise 
software today is that even passionate build advo- 
cates aren’t about to create true ERP or CRM suites 
from scratch. But at the sharp end of business, where 
money is made or lost, perhaps no vendor can truly 
meet your company’s needs — perhaps you're on 
your own. AMR Research Inc. analyst Eric Austvold 
believes a new mind-set is required: “In the past, 
people thought of packaged apps as the endgame,” 
he says. “But we need to start thinking of them in- 


stead as the founda- 
tion — the system of BUYING T0 EASE 
INTEGRATION 


record.” D 

Buying multiple applications from one 
vendor helped cut integration costs and 
headaches at WilTel Communications: 


QuickLink 38538 
www.computerworld.com 


Ulfelder is a freelance 
writer in Southboro, 
Mass. Contact him at 
sulfelder@charter.net. 
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F HE PLAYED BASEBALL, Kevin Arensdorf would 
be an all-star; he’s batting .500. A Unix systems 
administrator at lowa Telecom in Newton, 
Iowa, Arensdorf has had phone interviews for 
four different jobs, and he’s landed two of 
them, including his current one. 

Rick Sheeley is also hitting well in the tele- 
phone-interview game. Previously an independent 
IT contractor who had many jobs and now a data 
warehouse administrator at a major Las Vegas casino 
company, Sheeley has had about 100 telephone inter- 
views over the past 25 years and estimates that he 
has landed 15 to 17 jobs from them. 

Telephone interviews are becoming more common 
in today’s soft IT hiring market because they save 
time and money compared with face-to-face inter- 
views. Here are some tips for job seekers to boost 
their success rates when interviewing by phone. 

First, recognize that in most cases, telephone inter- 
view are used to screen candidates, not to hire them, 
says Edwin Pollock, regional president in San Fran- 
cisco at career management company Bernard Hal- 
dane Associates. “They’re asking questions to cut 
down the pack.” 

That means your goal for the interview should be 
to secure a face-to-face interview, not to get the job, 
notes Laurie Levenson, president of DirectAccess 
Staffing Inc., an IT staffing firm in Carlsbad, Calif. 
Show your enthusiasm. If you’re in another city, say 
you'd be happy to fly in for a personal interview. 

Don’t be overbearing, and don’t oversell yourself; 
just work to get to the next level, recommends Ken 
Hill, who worked for 17 years in human resources be- 
fore moving over to IT. He’s now CIO at defense con- 
tractor General Dynamics Corp. in Falls Church, Va. 

Make clear how technically adept you are. Look 
for articles about a prospective employer's IT de- 
partment, Hill advises. For example, you might learn 
that it has just finished an SAP implementation. Try 
to tie that piece of information to your own back- 
ground and experience. 

And don’t assume that it will be easy to get the 
next interview. For instance, for any given IT posi- 
tion, Jace Mouse, manager of application develop- 
ment at Cars.com in Chicago, conducts about 15 tele- 
phone interviews and asks only four candidates to 
come in for a face-to-face meeting. 

Don’t try to wing a telephone interview. “My first 
objective [in a telephone interview] is to see how 





seriously the candidate prepared,” says Oren Ezra, 


vice president of products services at Atlanta-based 


Jacada Ltd., which develops legacy-integration appli- 
cations. “If they haven’t taken the time, I get disinter- 
ested very quickly.” 


Preparation Is Key 

One benefit of a phone interview is that you can have 

all your research laid out on your desk because the 

interviewer can’t see you. Take advantage of this. 
Sheeley tries to anticipate questions about his 

technical skills and prepares a cheat sheet with notes 


about his experiences with technologies and his proj- | 


ect successes. 

Be ready to describe a few of your accomplish- 
ments. Arensdorf makes sure he’s comfortable and 
prepared and in a quiet place for the interview. He 
reviews his résumé and research material before- 
hand. He likes to schedule interviews in the morning, 
leaving the rest of the day for other things. 

Research the employer. “One of things that turns 
me off the quickest is the candidate who doesn’t 
know what we're about,” says Hill. Candidates who 





prepare have the edge over those who don’t. 

Jeff Markham, a manager in the San Francisco 
office of staffing and placement firm Robert Half 
Technology, says a lot of candidates take the tele- 


| phone interview for granted, thinking that the com- 


pany liked their résumés and that it’s just a formality 
to get interviews. Not true. You can’t make up for a 
lack of preparation with personality, body language 


| or eye contact when doing a telephone interview, 


he explains. 

Phone interviews tend to be fairly short — 15 to 45 
minutes. So be prepared to talk more about what 
projects you have worked on and what you have 
done rather than the actual skills you have, says Hill. 


Provide Your Own ROI 


And don’t underestimate the interview’s importance. 
Says Markham: “A few years ago, people got jobs just 
by having certifications. Today, you've got to be able 
to break down your accomplishments and provide 
specific ROI.” For example, if a programmer claims 
C++ development as a strength, Markham might say, 
“Give me an example of an application you devel- 


| oped with C++ that had measurable results, where it 


was better, faster, stronger.” 

Jacada’s Ezra likes candidates who are “proactive” 
and ask him questions about the company, its com- 
petitors and growth opportunities on the job. “These 
types of questions show me the candidate is confi- 
dent,” he says. 

Anything you can do to help the interviewer pic- 
ture you in the job position will help move you to the 
next level, says Mouse. One of the best candidates he 
ever interviewed talked about the most difficult 
challenges he had on the job, specific solutions he 
devised for them and the benefits that followed. The 
candidate then asked if there were similar challenges 
in Mouse’s organization. “He let me know what he 
succeeded in and weaved in a probing question 
about my company,” Mouse recalls. 

And smile. Yes, smile, even though the interviewer 
can’t see you. “The other person can hear [a smile],” 


| says Levenson. Show enthusiasm and interest. This is 


more important with a telephone interview than a 
face-to-face one because you have such limited inter- 
action with the interviewer. DB 





Horowitz is a freelance business and technology writer 


in Salt Lake City. Contact him at alan@ahorowitz.com. 


to ace telephone job interviews. 


Long-Distance 
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ClOs See Pockets 
Of Improvement 


Although IT hiring remains “con- 
servative,” some companies are 
going ahead with systems up- 
grades that were previously on 
hold, according to a survey by 
Robert Half Technology, an IT 
staff placement firm in Menio 
Park, Calif. 

Other survey highlights include 
the following: 
@ CiOs in New Engiand and the 
Pacific region project a 9% in- 
crease in hiring activity. 
@ 80% of ClOs say Microsoft 
Windows administration skills are 
most in demand. 
@ 50% of ClOs who are hiring 
will be seeking staff-level profes- 
sionals, and 24% will be hiring 
midlevel managers. 
® 86% of ClOs expect no change 
in hiring activity. 


Factors Drivin 
Third-Quarter Hiring 


30% 
Customer 
support 


41% 
Business 
growth 


11% 
Systems 


upgrades 


Application 
development 


BASE: More than 1,400 ClOs nationwide at 
companies with 100 or more employees 


MAY 


Study Reveals High 
Cost of Passwords 


Labor costs for configuring and 
maintaining password systems in 
companies with more than 
100,000 users average $300 to 
$350 per user, according to Ab- 
erdeen Group Inc. in Boston. 
These large companies also incur 
unnecessary overhead expenses 
averaging $35 million. The good 
news, Aberdeen says, is that 
identity management systems are 
eliminating those overhead ex- 
penses and showing positive in- 
cremental returns. 





MANAGEMENT 


JAY CLINE 


www.computerworld.com 


The ROI of 
Privacy Seals 


E’VE ALL SEEN THEM — the green 

Truste images, the BBBOnLine pad- 

locks and a host of other privacy 

and security seals. More than 2,000 

companies are paying up to $13,000 
per year to display these logos on their Web sites. 


But do they pay off? 


If the Internet is key to your company’s future growth 
strategy, then you need them to pay off. 


Poll after poll says the 
top reason people don’t 
spend more online is that 
they’re afraid their credit 
card numbers will be 
stolen. Visa and Master- 

Card say they’ll reimburse 
any fraudulent charges, but 
so far this doesn’t seem to 
be enough for consumers. 
Web users either don’t 
know about this promise, 
don’t believe it or don’t 
want the hassle of having 
to seek a reimbursement. 

The big question is, do E 
privacy seals give these worried cus- 
tomers the assurance they need to 
type in their charge-card information? 
Will their added sales justify the cost 
of the seals? Use this checklist to find 
the answers for your company: 

@ Are we like the companies that already 
have seals? If you’re a world-class 
e-commerce site, the answer is yes. 
Almost half of the 50 most-visited 
Web sites, by my count, display some 
type of privacy seal. If you hope to be 
a major technology company, the an- 
swer is also affirmative. Of the 14 IT 
firms in the Fortune 100, 10 display a 
privacy seal. 

@ Which seal is best? If you need a pri- 
vacy seal, either of the two market 
leaders will do. Truste has the highest 
market share among the seals, listing 
1,374 Web sites, compared with BBB- 





OnLine’s 701. Truste has 
nearly a 2-to-1 edge over 
BBBOnLine among the top 
50 Web sites and a 3-to-2 
edge among the Fortune 
100. That said, the Better 
Business Bureau, with its 
91-year history, has higher 
name recognition among 
Internet users (93%) than 
6-year-old Truste, which 
claims a 69% rate. 
@ What will it cost us for a 
seal? Both Truste and BBB- 
OnLine charge an annual 
: fee based on your yearly 
revenue. With Truste, companies 
bringing in less than $5 million are 
charged $599, while those grossing 
over $2 billion must pay $12,999. The 
pain is less with the BBB: Small com- 
panies are charged $200, while those 
grossing over $2 billion pay $7,000. 

@ What is required to qualify for a seal? 
Applying for a privacy seal will re- 
quire internal staff time to complete 
the paperwork and assure that your 
company meets the seal standards. 
You'll need to post a privacy policy 
that conforms to the seal’s standards. 
And you'll need to provide your cus- 
tomers with a way to opt out of direct 
marketing and having their informa- 
tion sold to third parties, as well as a 
way to access their information and 
file complaints. 

@ What return can we expect? If you’re 





a large corporation and your average 
Internet transaction nets you $10 in 
profit, you'll need your privacy seal to 
add as many as 125 more sales per 
month to make it a worthwhile invest- 
ment. If you’re a small company, you'll 
need only a few extra sales per month 
to pay for your fee. A sample of small 
clients of ScanAlert, an emerging se- 
curity seal provider, attributes Inter- 
net sales increases of 10% to 33% to 
that seal’s placement. 

What’s my recommendation? If 
you're a small business with online 
ambitions, this is an easy call. A priva- 
cy seal will pay for itself many times 
over. If you’re a major corporation do- 
ing any level of online sales, you may 
also be leaving money on the table if 
you lack a privacy seal. 

Consider conducting a trial run: 
Make a one-year commitment to main- 
taining a seal. Split your Web traffic in 
two, with only half of your traffic 
viewing the seal. By comparing the 
sales from the two versions of your 
site, you'll have hard proof of whether 
a seal will be a long-term winner for 
your business. 

Looking over the horizon, your re- 
turn will be higher if more online con- 
sumers come to trust the privacy seals. 
This may depend on the seals raising 
their standards — and your require- 
ments — over time. Privacy purists de- 
ride Truste and the BBB for not hold- 
ing companies to a higher level of pri- 
vacy and for not being more aggres- 
sive in their enforcement. 

Critics aside, everybody wins if the 
seal programs are a success. Seal 
members will do more to protect cus- 
tomer privacy, and online shoppers 
will have less to worry about when 
they click Submit. D 


CORPORATE PRIVACY VIEWS 


Jay Cline is Computerworld.com’s regular privacy 
columnist. See more of his online columns at 


QuickLink a3190 
www.computerworld.com 





Got Outsourcing 
Questions? 


Computerworld’s New IT Executive Summit Series Has the Answers 


If you’re an IT executive in an 
end-user organization, apply to 
attend Computerworld’s upcoming 
complimentary half-day summit on 
IT Outsourcing: The Offshore 
Alternative. 


Robust global communication 
technologies and state-of-the-art 
security tools have made IT out- 
sourcing an increasingly viable 
option to achieve ROI. Part of 
Computerworld’s new IT Executive 
Summit Series, this invitation-only, 
4-hour summit will explore how 
companies are realizing tangible 
benefits from outsourcing IT 
application development, 
integration and management. 


Seating is limited, so apply 
today! 


Los Angeles, CA 
Thursday, June 26, 2003, 8:00am to Noon 


Hyatt Regency 
8:00am to 8:30am 
8:30am to 9:00am 


9:00am to 9:30am 


9:30am to 10:00am 


10:00am to 10:30am 
10:30am to 11:30am 


11:30am to Noon 


Registration and Networking Breakfast 


Welcome and Opening Keynote 
Outsourcing Watch 2003: 

The Best of Both Shores 
Maryfran Johnson, Editor in Chief, 
Computerworld 


industry Update 

Evaluating Your IT Sourcing Options 
Bart Perkins, Managing Partner, 
Leverage Partners (an IT consultancy) 


Business Case Study 
Ron Glickman, SVP and ClO, 
The DFS Group 


Refreshment Break 


Outsourcing Strategies 
Leadership Strategies in Offshore 
Outsourcing 
Moderator: Maryfran Johnson, 
Editor in Chief, Computerworld 
Panelists: 
® Marty Chuck, CIO, Agilent Technologies 
® Ron Glickman, SVP and CIO, 
The DFS Group 
s Jerry McElhatton, Senior EVP of Global 
Technology and Operations, 
MasterCard International 
® Greg Schueman, Vice President 
and CTO, Mercury Insurance Group 


Open Forum 


For information, call Chris Leger at 888-299-0155 
or to register online, visit 
www.itexecutivesummit.com/outsourcing 


Sponsored by 


Cognizant 
Technology 
- Solutions 





Senior Software Engineer 
Visualize architecture for busi- 
ness-to-business integration 
software Diagram CASE 
(Computer Aided Software 
Engineering) tools for product 
architecture design automation 
Develop GUI (Graphical User 
interface) applications, diagram 
components for metadata mod- 
eling, analysis and mainte- 
nance. Perform component 
interface design and implemen- 
tation. Maintain and develop 
source code tools. Use Object 
Pascal, Delphi, metadata model- 
ing, analysis and maintenance. 
Also use TCP/IP, Oracle 7 or 8. 
NT networks, Active X, VSS 
MIDL compiler, resources script- 
ing, Serviets, Applets, JOBC 
UML, OOP, Delphi, MSVC++ 
Java, COM, IDL, Win 32 GDI 
SQL to complete tasks. Req- 
uirements include a Bachelor's 
degree or equivalent in 
Computer Science, an Engin- 
eering discipline or related field 
and at least five years of work 
experience in the job offered or 
related field of object oriented 
programming. Applicants must 
have unrestricted authorization 
to work in the United States 
Salary $85,561/year 40 
hours/wk. Respond with two 
copies of resume to Case 
#200200946, Labor Exchange 
Office, 19 Staniford St., 1st Fl 
Boston, MA 02114 


Senior Software Engineer: Work 
with the Project Lead and 
Principal Engineers to build, 
extend, and implement high- 
level software designs. Program 
in Java JSP and C++. Document 
and discuss designs, reading 
and writing specifications. 
Interact with QA staff and other 
developers. Responsible for 
working on many kinds of tech 
nology, including database, con- 
tent management, XML/XSL 
Linux, Unix, and additional web 
interfaces. Requirements incl- 
ude a Master's degree or equiv- 
alent in an Engineering disci- 
pline, Computer Science or 
related field and five years of 
work experience in the job 
offered or related field of soft- 
ware engineering. Applicants 
must have unrestricted autho- 
rization to work in the United 
States. Salary $85,561/year. 40 
hours/wk. Respond with two 
copies of resume to Case 
#200201415, Labor Exchange 
Office, 19 Staniford St., 1st Fl 
Boston, MA 02114 


Seeking qualified applicants for 
the following positions in 
Memphis, TN Senior Project 
Analyst Sales. Serve as advisor 
for new services, sales and com- 
pensation systems projects. 
Requirements: Bachelor's degree 
or equivalent in MIS, business or 
related field plus 5 years of expe- 
rience in planning and analysis. 
Experience in developing data- 
base queries for performance 
trend analysis and in develop- 
ing/maintaining variable compen- 
sation programs also required 
“Master's degree in appropriate 
field will offset 2 years of general 
experience. Submit resumes to 
Sibi George, FedEx Corporate 
Services, 1900 Summit Tower 
Bivd., Suite 1400, Orlando, FL 
32810. EOE M/F/D/V. 


Seeking qualified applicants for the 
following positions in Memphis. 
Collierville, TN: Senior Business 
Application Analyst. Act as liaison 
between technical developers and 
users/customers. Requirements. 
Bachelor's degree” in computer 
science, business, math, engineer- 
ing or related field plus 5 years of 
experience in analyzing business 
systems and developing technical 
automated solutions. Experience 
with SQL, CGI environment and 
J2EE environment also required 
*Master’s degree in appropriate 
field will offset 2 years of general 
experience. Submit resumes to Sibi 
George, FedEx Corporate Servic- 
es, 1900 Summit Tower Bivd., Suite 
1400, Orlando, FL 32810. EOE 
MIFIDIV. 


alee Bele eS 


Developer sought by oncology/ 
therapeutics div. of pharma R&D: 
co. in San Francisco, CA 
Candidate must have a 
Bacheior’s degree or equiv. in 
Computer Engineering or relat- 
ed. Min. of 5 years experience in 
application development & data- 
base design & development on 
Oracle platform required 
Extensive exp. in OOAD, Object 
Oriented Programming, DBA, 
database design tools, data 
modeling tools (ERWin), SQL 
PL/SQL, Unix (sheliscripts, FTP. 
automation), Java, Oracle 8i 
database, Oracle 11i applica- 
tions (order fulfillment), Blue 
Martini CRM and HTML, phar- 
ma. pricing s/w customization 
required Experience in phar- 
ma. pricing required. Must have 
strong analytical skills in pricing 
infrastructure, information ser- 
vices & data analyses, & excel 
lent oral & written communica- 
tion skills. Send resumes to 
OTN, Staffing Dept., 395 Oyster 
Point Bivd., Suite 405, South 
San Francisco, CA 94080, Job 
Code: VM-764 or fax resume to 
(650) 737-9576 


S/ware Dvip Co in NY seeks 
multiple openings for foll pos 
tions: Network Eng/Systems 
Analysts. Analyze, dsgn, dvip, 
test & impimt IT projects & 
s/ware applics w/1 of the foll 
skills in UNIX & Win envrmt 


1) Power Builder, Rational Rose 
ErWin, Sybase SQL, C. (Job 
Code REA) 


2) Power Builder, PL/SQL, SQL 
UNIX, Oracle, Infomix (Job 
code AMP) 


3) Power Builder, Visual C++, C 
PL/ SQL, Oracle (Job Code 
MAW). 


Tech Spits: LAN/WAN, CCNA/ 
CCDA in n/work applics, dsgn & 
impimt w/ MCSE cert. Bach/ 
equiv or Assoc/equiv in Sci/ 
Comp Applic/Engg/Equiv + 6 
mos-2 yrs exp. Will accept any 
combo of edu, training & exp 
that meet min reqs. Refer to job 
code. Resp to HR Dept, Trade 
Ship, Inc, 201 Old Country Rd 
Ste 202, Melville, NY 11747 
Fax: 631-673-8958. E-mail 
info@tradeshiponline.com 


beets 
PROGRAMMER II 
rea) 

Global traveler food service co. 
seeks Computer Programmer Il 
Duties are: Perform programming 
assignments as defined by Senior 
Programmers using skills in OOP, 
VB, C/C++, SQL, Perl and UNIX 
shell scripting, Client-Server 
application development, and 
RDBMS concepts; as assigned, 
maintain and modify programs; test, 
document modifications; and write 
operator instructions. Requires 
2 years of experience in the duties 
OR B.S./equiv. in Computer 
Science/MlS/related field and 6 
months of experience in the duties. 
40 hrs/wk, Mon-Fri, 8-5. E-mail 
resume with Job Code: CPII to 
resumes@hmshost.com (subject 
line must include Job Code CPIl). 
eoe/mfdv/dfw. Absolutely no calls. 


ecfirst.com, Inc., seeks 
exp’d consultants, soft- 
ware engineers & sr. soft- 
ware engineers to design 
& develop software appli- 
cations. Tools include: 
ClearCase, WASD, Java, 
J2EE, EJB, XML, VB, 
ASP, COM, SQL, Solaris 
and Oracle. Send res- 
umes to: H.R., 13375 
University Ave., Suite 
300, Clive, IA, 50325. 


Programmer Analyst for 
Telecom co to analyze, 
dsgn & impimt Internet/ 
Intranet applicns using VB 
6.0, ASP2.0, Visual 
Interdev 6.0, HTML, VB 
Script, Java Script, 
Server 7.0 in WinNT server 
& workstation. Dvip enter- 
prise-level reporting & 
d/base systems Req 
Bach/equiv in Eng, Sci, 
Comp Sci or related & 2 yrs 
exp. Airbel Wireless, Inc, 
206 Terminal Dr, Plainview, 
NY 11803, fax (516) 349- 
0080, abay@airbel.com 


Programmer Analyst: wanted by IT 
Firm in Delaware, Must have 
Bachelors Degree in Electrical or 
Electronics Engineering besides 
six months exp in design, install 
configure, & implement network 
work and storage solutions utilizing 
EMC Symmetrix, Connectrix, Cel- 
erra File Server, Brocade DS 16B 
McData ED-64M, ED-32M hard- 
ware with Software ESN Manager, 
EMC Control Center, Power Path. 
Fiber Cards and configuration in 
Solaris 2.6/7/8, HP-UX 10.x, SCO 
Unix, Linux 6.2/7.0, Windows 
95/98/NT/2000 etc. Respond to 
HR Dept, Neotech Solutions Inc 

1170 Broadway, Suite 314, New 
York, NY 10001 


Sr. Software Applications Engineer 
to analyze, design, develop, test 
debug, & administer application 
systems; analyze/create database 
applications/tables, design relation- 
al databases and perform data 
modeling to track & optimize busi- 
ness operations of client compa- 
nies. Provide technical leadership 
to maintain the systems. Reqd 
B.S.C.S. or rel. field & 5 yrs rel 
Exp. (M.S.C.S may be substituted 
for 5 years of exp), 5-6 yrs experi- 
ence in Oracle, Oracle Developer. 
PL/SQL and SQL Loader, and 3-4 
yrs exp. in Oracle Designer. 40 
hours/week, 9am-5pm. Frequent 
relocation within the U.S. may be 
necessary. Send resume to J 
Brigham, HR #98y, Tek Systems. 
Inc. 7301 Parkway Drive, Hanover. 
MD 21076. 


Computer Program Analyst 


International Advanced 
Business Computing, Inc 
now has 2 Computer 
Program Analyst positions 
available. Incumbent should 
hold a BS in Computer 
Science or Engineering and 
have at least one (1) year of 
experience in the industry. 
Please send your resume 
and credentials to Human 
Resources at IABC, 5634 
Owens Drive, Suite 208 
Pleasanton CA 94588 


Computer 


AlphaSoft Services Corp. is a rapid- 
ly growing systems integration & 
consulting services provider. We 
are currently recruiting for the fol- 
lowing f/t openings in Walnut 
Creek, CA 


Software Engineers 
Computer Programmers 
Project Engineers 

Jr. Project Engineers 


All positions may require travel 
and/or temporary relocation. For 
more information, please visit our 
website at www.alphasoft 
services.com, or see our listings at 
www.dice.com. Apply by mail to 
HR, 2121 N. California Bivd. #350. 
Walnut Creek, CA 94596 
(925) 932-3743 - fax, or email 
ITJOBS@alphasoftservices.com. 


iT|careers.com 


Computer Support Specialist 
wanted by Sunrise Global Inc. 
to provide applications, db & 
network support. Must have 
MS in Comp Sci & certificates 
of CNE and CCNP w/2 yrs 
hands-on exp in Novell, 
Solaris, file sys, email sys, Web 
server, SQL server, Cisco 
router & switches config & 
admin to support users to 
access servers through LAN/ 
WAN environment. Must also 
have prog exp in ERP sys 
Send resume to 4000 
Bordentown Ave., Sayreville NJ 
08872 or fax to 732-651-9998 


Programmer Analyst, Wilmington, 
DE. Design & devip. & implement 
advanced net enabled applica- 
tions using Java, HTML, XML 
Java/RMI, CORBA, EJB, C, SQL 
and PL/SQL and do object orient- 
ed programming using C++ for 
Windows 95/98/NT & Unix; de- 
sign GUI using VB, Visual Age for 
Java and Developer 2000; design 
& develop RDBMS using Oracle, 
SQL Server, MS Access, FoxPro 
and generate customize reports 
using Crystal Reports. Bachelors 
in MIS or Comp. + One yr Exp 
Send Resume to DCM Group, 
Inc., 563 Broad Street, Newark 
NJ 07102 


Sr. Database 
Administrator 


Oversees client/server appli- 
cations, build using Visual 
Basic & Oracle. Installs, main- 
tains, supports & enhances 
applications. Req Bach in any 
field & 2 yrs exp in the job/2 
yrs exp as Programmer 
Analyst Jobsite West 
Greenwich, Rhode Island 
Send ad & resume: Yen C 
Chong, Amgen inc., One 
Amgen Center Dr., Thousand 
Oaks, CA 91320-1799 
Include Ad# 02-449FV. 


INFORMATION TECHNOLOGY - 
GIS Analysts/Programmers need- 
ed. A spatial info. systems comp. 
is seeking qual. candidates pos- 
sessing MS or equiv. and/or rele- 
vant work exp. Part of the req 
relevant exp. must include 2 yrs 
working with GIS & Java. Mail 
resume & ref. to: GeoAnalytics, 
Inc., Attn: HR, 1716 Fordem Ave. 
Madison, WI 53704. Please refer- 


ence this ad in your response. 


Looking for 
a new career? 
The new 
IT careers.com 
and CareersJournal 
combined jobs database 
can help you find one. 


Check us out! 


iT|careers.com 





iTcareers.com is 


the place where your 


fellow readers are getting 


a jump on even more of 


the world's best jobs. 


Now combined with 


CareerJournal.com. 


You have more jobs 


to choose from. 


Stop in for a visit. 


See for yourself. 
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Required Software Engineer for 
Wisconsin to design & develop 
computer software systems using 
pure OODBMS and ORDBMS mul- 
timedia database technologies. Re- 
search & develop metadata reposi- 
tories using Dublin core, w3c 
GILS, and RDF initiatives to sup- 
port multimedia metadata struc- 
tures. Will use Oracle 9i, Poet or 
Jasmin, Java, EJB, apache, Tom- 
cat, Html, XML, Oracle Text, Oracle 
Intermedia(VIR, Audio & Video) on 
various UNIX and NT Servers 
Implement and configure Oracle 
Rac, oracle advanced replication & 
oracle gateways for distributed net- 
work environments for Digital soft- 
ware solutions. 3 years of experi- 
ence required.40 Hours/week. 8 
A.M - 5 PM Mon-Fri competitive 
salary. Must have proof of legal 
authority to work permanently in 
USA. Pls send one resume and 
cover letter to Swift Technologies 
1452 Yankee Park Pl, Dayton, OH 
45458 


Project Manager IT (integration 
Engineer) wanted by Producer of 
Vitamins & Fine Chemicals in Par. 
sippany, N.J. Must have Bachelor's 
degree or foreign equiv. degree in IT 
or a quantitative business discipline 
and 8 yrs. exp. in job offered or 8 
yrs. of IT exp. in application devel- 
opmentproject management. Must 
include experience with a coliabora- 
tive e-commerce environment in- 
cluding SAP R/3 interface design 
utilizing XML, strong knowledge of 
SAP BAPI, and familiarity with Web 
Methods, SAP Business Connector 
or similar middleware products 
Report to Roche Vitamins Inc., Attn 
Human Resources, Dept. code 
WHR, 45 Waterview Bivd., Parsip- 
pany, NJ 07054-1298; fax: (973) 
257-8419; or e-mail: parsippany. 
human_resources@roche.com 


Software Engineers: Design, 
develop, code, test and imple- 
ment software systems & 
apps. per hardware interface 
specifications in Linux Kernel 
Perl, Tel/Tk, AWK, Bourne 
Shell, Visual Source Safe, 
CVS, RCS utilizing Micro/ 
RISC-processor designs and 
storage protocols-RAID 
iSCSI, SCSI, Fibre Channel 
etc. Prevailing wage & bene- 
fits. Send resume to Susan 
Chitsaz, iVivity, Inc. 5555 
Oakbrook Parkway, Ste. 280 
Norcross, GA 30093. EOE 


Software Engineers to analyze 
design, develop/customize busi- 
ness applis using Oracle Fin 
and Manuf. Appis, Oracle, SQL. 
PL/SQL, Dev 2000, Designer 
2000 etc. under Windows, UNIX 
and Sun Solaris envir; interact 
with end users, gather and doc- 
ument reqs; prioritize functional 
specs formulated from user 
reqs; evaluate product function- 
ality and design to assure quali- 
ty. Require: Masters or foreign 
equiv. in CS/Engg.(any branch), 
Science/Bus. Mgmt. Travel 
involved. F/T position. Comp- 
etitive salary. Resume to: HR 
Quest America, Inc., 211 East 
Ontario Street, Suite 1800 
Chicago, iL 60611 


Software Engineer 


Design, development, coding, unit 
testing and debugging of financial 
systems and applications utilizing 
Progress 4GL and Java/J2EE 
platform, interfacing Progress with 
C. In addition, provide technical 
support to existing systems and 
DBA activities and Unix shell 
scripting. Must have Masters 
Degree in CS & 1 yr. exp. or 1 yr. 
exp. in a related position w/ability 
to use: VPAS, J2EE, and Pro- 
gress. 40.0 hrs./wk 9:00 AM - 6:00 
PM. Send cover letter and 
resume to: McCamish Systems. 
LLC, 6425 Powers Ferry Road. 
39 Floor, Atlanta, GA 30339, Attn 
Donna Perimutter. 


CWO30602E/W/MW 2 
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DBAs to install, administer 
upgrade, perform performance 
tuning & backup/recovery on 
Oracle/SQL Server, Lawson 
ERP & EDI: administer HP-UX 
in multi server envir; design 
implement appis using Dev 
2000, PL/SQL Oracle in 
clienUserver envir.; write back- 
end stored procedures, pack- 
ages, triggers, screens using 
PL/SQL Forms Reports 
Require: BS or foreigt: equiv. in 
Buss. Admin/CS/ Engg.(any 
branch) & 2 yrs of exp. in IT. S/W 
Enggs to analyze, design devel- 
op appls using C++, Java 
CORBA, EJB, JDBC, Rational 
Rose, CGI, SQL, Oracle, Crystal 
Reports. Weblogic under 
Windows/UNIX OS; perform 
Project scoping, planning 
time/cost schedules, quality of 
deliverables; study, evaluate 
new tech/methodologies; pro- 
vide technical guidance for user 
problems. Require: MS or for- 
eign equiv. in CS/Engg. (any 
branch) & 1 yr exp. in IT. High 
Salary. F/T. Travel involved 
Respond to: HR, Unilinx, Inc 
4625 Alexander Dr., Ste 11 

Alpharetta, GA 30022 


Lead Programmer Analyst, TSYS 
Columbus, GA. Plan, analyze. 
design, and develop batch & on- 
line (e.g. CICS, MQSeries) appli- 
cations to meet business & techni 
cal requirements; understand prob- 
lem identification and utilizes prob- 
lem management processes; deter- 
mine efficiency & impact of pro- 
grams on systems including those 
that interact across functional 
areas; document and interpret 
technical specifications and 
design, develop, & complete testing 
Procedures for assigned projects 


Competitive Salary. Bachelor's 
degree or BCIS equivalent in Com- 
puter Science, Computer Applica- 
tions, or Information Systems + 
total of (5) yrs of professional expe- 
rience programming in a mainframe 
environment using COBOL, VSAM. 
JCL, and DB2. Of total 5 yrs, must 
include 4 yrs with CICS and IMS 
and 2 yrs w/ MQSeries, File-AID. 
Endevor, Abend-AID, & Lotus 
Notes. Must have legal authority to 
work in the U.S. Please send 
resume demonstrating all minimum 
requirements to: Kerry Alexander, 
1600 1$t Ave., Columbus, GA 
31902. Ref # LPASM1. 


SYNAPSE GROUP, INC.. a leading 
computerized magazine marketing 
company, is looking to hire a quali- 
fied PROGRAMMER ANALYST, to 
plan, develop, test, document and 
update computer programs to in- 
crease operating efficiency; to 
enter program codes into computer 
systems; to evaluate user require- 
ments; and to monitor performance 
and provide technical assistance to 
program users. Qualified applicants 
are required to possess a Bachel- 
ors degree in Computer Science or 
it's equivalent. Experience/knowl- 
edge in Unix, Oracle, System and 
Network administration preferred 


The company offers a competitive 
compensation/benefit package and 
an environment where achieve- 
ments are recognized & profession 
al growth is encouraged. Qualified 
applicants are encouraged to mail 
resumes to: Department of Human 
Resources, Synapse Group, Inc 

Four High Ridge Park, Stamford. 
CT 06905 


Programmer Analyst: Nashua 
NH: Anlyze, schedule, dsgn, dvip. 
test, impimt, install s/ware applics 
using (a) MS Visual C/C++, VB. 
GWBasic, Win SDK, MFC, Dbase 
IV for Win & (b) C/C++ on Unix 
platforms. Anlyze, schedule, dsgn 
& dvip enhancements for base 
product. Write Install Prog using 
instaliShield. Eval user requests 
for new/modified prog, dvip proto- 
types for same. Write user manu- 
als for installation & operating 
procedures. Anlyze upgrade 
migration reqts for applics, evolve 
solutions for same. Coord main- 
tenance & qualification work 
activities by planning dsgng & 
scheduling, Anlyze & resolve cus: 
tomer support level issues. Use 
Oracle & Informix. Reqs: Bach or 
equiv in Sci/Math/Engg 
Electronics + 2 yrs exp in duties 
listed. Resp to Datamatics 
(America) Inc., 20 Trafalgar 
Square, #445, Nashua, NH 
03063. email 
datanj@datamatics.com 


System Engineer Provide 
instrumental support to tech 
aspects of CCTV, Access 
Control Systems Intrusion 
Detection, & Intercom systems 
through res., design, & impl 
Support & train customers dur- 
ing inst. & operation onsite & 
remotely. Impi. & maintain ail 
facets of comp. network oper 
DHCP, DNS, TCP/IP, Print 
Server, SQL Server, !!S5.0 
Server VPN, & Firewall 
Maintain PCs & servers, incl 
troubleshooting of hardware & 
software problems, inst. & confi 
of new software, comp. & 
peripherals. Req B.S. in 
Industrial, Electrical Eng., or rel 
& abil. to use comp. network 
operations, Print Server, SQL 
Server, Firewall, Access Control 
CCTV Intercom systems 
Security Alarm systems, Unix 
SQL, HTML, ASP. Able to travel 
nationwide. 40.0 hr/wk. 8-5 
Resume to: Mr. Jerry Clark, Sr 
Vice Pres., Tech Systems, inc 
3400 Corporate Way, Ste. F 
Duluth, GA, 30096 


System Admins to install, main- 
tain, administer Windows NT. 
Linux HP-UX,SCO/Solaris 
plan. maintain, troubleshoot 
LAN/WAN; manage networking 
protocols TCP/IP, IPX/SPX, etc 
instali, upgrade network hard- 
ware/software. Require: B.S. or 
foreign equiv with conc in 
CS/Science/Engg.(Any branch) 
and 2 yrs exp in IT 
Programmers to analyze, design 
appis using Java, VB, Oracle 
SQL Server, ASP, ActiveX 
HTML, JavaScript, Lotus 123 
etc. under Windows OS; write 
triggers, stored procedures to 
account for business processes 
perform req analysis; develop 
user interface, prepare reports 
Require: Bachelor's degree of 
foreign equiv in CS/Engg.(any 
branch) & 6 months of exp. in !T 
In lieu of BS, 2yrs of academic 
studies towards a Bachelors 
plus 2 yrs of exp in IT will be 
accepted. Travel involved. High 
salary. Respond to: HR, Radiant 
Technologies, Inc., 335 Majestic 
Cove, Alpharetta, GA 30004 


COMPUTER SYSTEMS 
ENGINEER 
MEDICAL SYSTEMS 
INTEGRATION 


Designs, develops and main- 
tains computer systems to 
import data from multiple piat- 
forms/sources, and to man- 
age data within private wide 
area network. Must have B.S 
in Electrical Engineering 
Computer Science or equiva- 
lent, and at least two years 
experience in the job offered 
50+ hours per week. EOE, 
Drug Free Workplace. Send 
resume to 21st Century 
Oncology Attn: Joyce White 
2234 Colonial Bivd Ft 
Myers, FL 33907 or fax 
(239)931-7381 


IET2S 


NET2S is a leading International e- 
business, information technology 
and communication infrastructure 
consulting firm. We are current! 

seeking for the following posi 


* Sr. Tibco (RV, Hawk, Ingetration 
Manager) Developer 
Security Architect 
* Sun One / Siteminder Architect 
* Business Objects / Cognos 
Developers 
+ NET Architect 


All positions require BS/MS degree 
with a minimum of 2 to 3 years of 
experience in the field. Must pos- 
sess excellent communication 
skills as well 


NET2S, 82 Wall Street, Suite 400. 
New York, NY 10005; Fax: (212) 
279-1960; Phone (212) 279-6565; or 


Email: jobus-ny@net2s.com 


Dalee bac as 


Software Engineer: Perform sys- 
tem analysis, design, develop- 
ment, testing and documenta- 
tion of company’s web portals. 
Work with Creative, Content 
and Engineering Teams to 
design, deliver and deploy high- 
class medical portals. Develop 
web portals using Cold Fusion 
Macromedia Spectra, Per 
HTML, DHTML, Java Script 
Microsoft Visual Source Safe 
and SQL Server 2000. Utilize 
content management system 
Coid Fusion scripting and CFML 
extensively to create objects 
methods, PLP, workflow, content 
categorization and inbound 
news syndication streams 
Develop detailed test plans and 
perform extensive testing of cur- 
rent applications using QA soft- 
ware by developing SQL and 
CFML scripts. Develop logging 
and reporting applications for 
medical portals using Spectra 
Cold Fusion, Perl, Webtrends 
and lIS. Work on hardware and 
operating systems such as 
DELL, HP servers, Windows 
2000 and Unix. Define direction 
for future application develop- 
ment using Java and other 
development tools. Require- 
ments include Master's degree 
or equivaient in Computer 
Science, an Engineering disci- 
pline or related field and three 
years of work experience in the 
job offered or related field of web 
application development. Applic- 
ants must have unrestricted 
authorization to work in the 
United States. Salary $81,946) 
year. 40 hours/wk. Respond with 
two copies of resume to Case 
#200200875, Labor Exchange 
Office, 19 Staniford St., 1st Fi 
Boston, MA 02114 


QUALITY ASSURANCE SOFT- 
WARE ENGINEER II: Will test 
proprietary factory automation 
software to uncover defects. Will 
evaluate new or modified soft- 
ware to verify that program func- 
tion according to requirements 
and conform to corporate quality 
Standards. Will design, develop 
and deploy test plans and auto- 
mated tests at the Ul and API 
levels. Will follow accepted qual- 
ity procedures and participate in 
continuous improvement activi- 
ties. Will employ MES products 
UNIX, Windows NT/2000/XP 
user, including Administration 
functions, VB or C++, SQL 
Rational Robot, WinRunner 
Oracle, ClearCase, and other’ 
automation tools. Requirements 
B.S. (or for equiv.) in CS 
Electrical or Electronic 
Engineering or related field and 
two (2) years of experience in 
the job offered or two (2) years 
experience in the related occu- 
pation of Software Development 
or Programming. Also, demon- 
strated expertise in the follow- 
ing: MES, Automation Tools 
UNIX Operating Systems, and 
Oracle DB. Offered salary is 
$58,000/year for full-time 
employment (min. 40 hours per 
week) and standard company 
benefits. EEO. Submit 2 
resumes and respond to Case 
No 220201804 Labor 
Exchange Office, 19 Staniford 
Street, 1st Floor, Boston, MA 
02114 


Pictures Inc. (Anivision America) 
is looking for programmer and 
Oracle DBA using XP, ME, 9X 
UNIX, Novell Netware. Applicant 
must have at least Bachelor with 
experience in Oracle, Novell 
We offer competitive wage 
standard benefits. Please con- 
tact joanne@sunwoo.com 


Software engineers, program- 
mer/system analysts wanted by 
Byzan Tech, a small dynamic 
company. We require minimum 
BS with experience as program- 
mer or IT consultant 
Competitive salary with full ben- 
efits Please contact 
career@byzantech.com No 
calls. EOE 


Senior Quality Assurance 
Engineer-Automation 
Duties: Design the systems and 
configurations which will allow 
QA to automate their testing of 
both SBR and Proxy; evaluate 
GUI automation tools, setting up 
the GUI automation process 
within the QA department and 
acting as the GU! automatior 
evangelist within QA. Daily 

duties incluc ent- 

threadin 

side programming in Peri as well 
as duties as a system program- 
mer, J &.G VB program 
ming ng in Windows NT 
and vironments. Daily 
work QA Aut Tools 
such as Wu and 
Loadrunner ed. Work with 
Support and Sales Engineering 
to support ongoing projects and 
new func 
and explai echnologies 
and how th technologies 
relate to stir unctionality 
Min 

equiv 

Engin 


related field of 


nderstand 


exp. in the 
exp. in a related o e 

QA engineering, automation, or 
consulting ir W development 
or related) PL 
Demonstrated working knowl- 
edge of the following required 
(1) Winrunner 
RSW software; (2) Bug tracking 
SW tools (TestDirector & Lotus 
Notes and 3) Testing 
Methodologies including manu- 
al, automated and perfor 
mance/load testing. Offered 
salary range is $58,000 to 
$75,000 year (40hrs/wk). Send 
resumes to: Labor Exchange 
Office, Case #2002-01554, 19 
Staniford St., 1st fi., Boston, MA 


Principal Engineer 
Duties: Developing a Java 
Swing based toolkit for creating 
user interfaces in XML. Specific 
duties include familiarization 
with all aspects of the develop- 
ment cycle, from OO design 
through implementation to test- 
ing. Developing object oriented 
software design using Java and 
XML on Windows NT and Unix 
platforms. Development using 
public key infrastructure, cryp- 
tography toolkits, and manipula 
tion of computer algorithm mod- 
els and theory. Min. Regqts 
Masters degree or foreign equiv- 
alent in CS, Engineering or relat 
ed field of study OR in the alter- 
native, BS/BA and 5 yrs pro- 
gressive exp. in job offered or 5 
yrs progressive exp. in a related 
occupation (i.e. programming 
development, systems analysis 
or related). PLUS, Demon- 
strated working knowledge and 
expertise of the following 
required (pre-or post MS experi- 
ence accepted): (1) Computer 
algorithms theory and practice 
(2) Client-server programming 
using Java Swing, XML, and 
DOM; and (3) Public key infra- 
structure and cryptography pro- 
gramming. Offered saiary is 
$90,500 year (40hrs/wk). Send 
resumes to: Labor Exchange 
Office, Case #2002-01555, 19 
Staniford St., 1st Fl., Boston, MA 
02114. 


Ahome health care services 
provider in Sterling Heights 
Mi seeks a Database 
Administrator. Requires a 
Bachelors degree or equiva- 
lent in Computer Science & 
1 yr of exp as a Database 
Administrator, Software 
Systems Analyst, Wed 
Designer OR Programmer. 
Please send resume to 
President/CEO, Ace 
Homecare Network, Inc 
2567 Metro Parkway 
Sterling Heights, MI 48310 
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adrunner and] 


oftware Engineer: Design 
maintain, and enhance a 
desktop system using Microsoft 


dlogies, including 


MS SQL Server, C++ and 


cess, that will track and 


ster executive deferrals in 


ng parameters 


ides applying 


byect 
reating 
entineseas 


Data 


Analysis ngin 


PLUS, must possess demon 


strated expertise: (1) In 
VB knowledge in develo 
tier Internet applications; object- 
solutions using inheri- 
lymorphism and over. 
joading; and reusable 
nents for a nserver so 
(2) With Relational Database 
Modeling to convert stand alone 
database systems into multi 
user client/server solutions; and 
3) Applying Mathematical prin- 
iples to accurately develop 
code for appiicatic lustrating 
financial proje Nnciuding 
matrix manipulat alculus 
and analysis of 
Offered salary is 
year, full-time 9-5 p Benefits 
Send (2) resumes to: Labor 
Exchange Office Sase 
#200201064, 19 Staniford St 
1st fi., Boston, MA 02114 


Software Engineer 
(Bioinformatics) 


enaissance Pharmaceuticz 


has an in 


New Haven 
a Software E 


ware system tes! 


ages 
Resu 
reflect ea 


Leigh V 


Associate, Genaissa' 
euticals, Ir Five 


New Haver 
equal of 


Computer Programmer | 
Draw flowchart, program 
and test environmental GIS 
software application with 
AML, C/C++ for on Caipuff 
Debug program and con- 
vert database with CICS 
Oracle; Write programming 
changes with JCL and op 
manual. 8-5, 40h/w, BS in 
Comp. Sci. & six month exp 
involving AML, CICS and 
Calpuff. Resume to Janicki 
Environmental, inc 
Janicki03@yahoo.com/fax 
727-895-4333 





1 is available for an inter 
Senior Industry Analyst 
rin Atlanta, Georg 


solutions cor 


company architects and 


ext generation software 


f-sale and net sys: 


reliability and perfor 
negotiate with inter 


nrs/week. 8 


Master's degree or 


ar. Require: 

valent in Cor 

Management 

Systems & 1 year experi 
the job offered 


the related occ 


19 Staniford St 


st Floor, Boston, MA 


testing 
implementation; ensure project 
ency & adherence to sche: 
mulate & define systems s¢ 
tives; devise procedures 
apac 
sser 


pport 


4 +4 years exp 
or as Soft. E 
&C 


ted authorization 
JS. M-F, 9AM-5PM, 4( 
Salary range: $92k 
An EOE. Send 2 
of resume to Case No 
200201836, Labor Exchange Office 
19 Staniford St., 1S Fi., Boston, MA 
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Consultant. Job location 
Hartford, CT. Duties: Perform 
database admin. & analysis 
design, data modeling, & trou- 
bleshooting tasks & testing 
activities Design & develop 
complex solutions from cus 
tomer's business reqrmnts 
Translate business/func 
Reqrmnts. ir ode. Implement 
system enhance changes 

m tech. reqrmnts. & specs 
Develop, modify st & deploy 
ports, PL/SQL 
jures & comple 
& views 
srform Pro*CO! 
nt 
duct 
Comp. Sci 
a related field 3 yrs 
b offered or 3 yr 
a Database Admin 
rcurrent 
rs. exp. performing 
2 analysis & 3 yrs. exp 
me (no 
dwin, CTG 
In 3h une Dr., Ste. Q17 


Poughkeepsie, NY 12601-5571 


Programmer/Analyst: Analyze 
jesign, develop, test, imple 
ment and maintain customized 
software plications ir a 
n/server environment. May 
multi-tier systems 
ternet/Intranet/E 
have Bach- 
9 equivalent in CS 
veering/Math or related 
st have 2 S exp. in job 
offered or in related software 
devel ment. Such experience 
must include Windows NT 
HTML, ASP, SQL Server, and 
Visual Basic. Must be willing to 
assigned to unanticipated 
sites throughout the 
States Salary 
$75,000/yr Hrs: 8:00a: 00pm 
40/wk. Please send 2 copies of 
resume to Case No 
200201990, Labor Exchange 
ce, 19 Staniford St. 1st FI 
Boston, MA 02114 


r.Programmer/Analyst 
Analyze, design and develop 
customized computer software 
in a client/server environment 
using Oracle, PL/SQL, PRO C 
and SQL loader tools. May be 
ised on multi-tier systems relat- 
ed to Internet/Intranev/E Comm 
erce. Must have BS or equiva 
lent in CS/Math/Engineering or 
related. Must have 2 yrs exp. in 
j offered or in Software 
Development in client/server 
nt using Oracle. Must 
ng to be assign to 
unanticipated client _ sites 
throughout the United States 
Salary $77,015.38/yr Hrs 
)0am-5:00pm, 40/wk. Please 
copies of resume to: 
Case No. 200201898, Labor 
Exchange Office, 19 Staniford 
St., 1st Fl, Boston, MA 02114 


Senior Programmer/Analyst 
Analyze Jesign, implement 
J support multiple enter- 
prise J2EE applications. Will 
also design, build and maintain 
N-tiered enterprise component 
based applications. May serve 
as team leader. Must have BS 
r equival in CS/Math. 
Engineering or slated. Must 
have 2 yrs exp. in job offered or 
related Software Development 
using Java technologies. Must 
be willing to be assigned to 
unanticipated client sites 
throughout the United States 
Salary: $80,000/yr Hrs: 8:00am- 
5:00pm, 40/wk. Please send 2 
copies of resume to: Case No 
200201989, Labor Exchange 
Office, 19 Staniford St., 1st Fl 
Boston, MA 02114 


SYSTEMS ANALYST to ane 
design, develop, test, implement 
maintain and support large volume 
client-server and web-based ap: 
plication software systems in multi 
hardware/software environr 
ising Java, J2EE, Ser 
XML, JSP, OOPS 
Access, Oracle, SQL Serve 
base, Tibco, Cognos, Informatica 
MQ Series, UML, Rational Rose. 
EE Application Ser 


under UNIX, Linux 


A/HTML/CG 

Oracle/Sybase 

2velopers & DBAs 

and ERP 

: B.S. degree and 

:MS 

S may 

the U.S. Multiple 

spen positions in Florida, Minne 

ota ois, Delaware, Kansas 
Texas orward re mes 

M te 


anageré neConsulting 


8625 treet, Suite 422 


LongBoard, Inc., provider of 
telecom application server & 
service Development tools is 
seeking a SW Designer in 
Durham, NC. Min Req: MS in 
Eng, CS, or related plus 2 yrs 
exp in software devel or related 
Exp m incl: product develop- 
ment exp in building distrib soft 
ware sys using industry std mid 
dleware sys or Unix platform 
use of programming lang such 
as C++ & Java; us lation: 
al database servers & SQL; & 

of object or d design in 
are dev 

oar 


Database Administrators - 
Oracle DBA activities, logi- 
cal/physical design of data- 
base. Software Engineers- 
analyze, design & imple- 
mentation of software on 
integration project using 
C++ & Java. Min Edu-BS in 
Comp.Sc./Engg or equi, Min 
Exp-2 yrs. Job may involve 
working at various locations 
throughout the US. Please 
send resumes to Attn: RR 
1022 East Divide Ave Suite 
D, City of Bismarck, ND 
58501 


Software Engineer to analyze, de 
sign, develop, test and implement 
client/server applicatio ssing 
Power Builder and SQL Serve 
Responsible for SQL Server data 
base design pment and 
ration on Windows Platforms 
uire. BS Degree in Science. 
ineering or a closely related 
field with 2 years of progressively 
responsible experience in the Job 
offered 
of Programmer/Analyst. Extensive 


J or in the related occupatior 


travel on assignments to various 
lient sites within the US is re 
quired. Competitive salary offered 
Apply by resume to: Ravi 
Kandimalila, Everest Computers. 
Inc 900 Old Roswell Lakes 
Parkway, Suite 300, Roswell, GA 
30076; Attn: JobAB 
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Manager - Technical Recruiter 
sought to be responsible for 
recruiting of IT profls. Reqs 
Masters or equiv in Personnel 
Mgmt or Bus. Admin. wiat 
least 2 yrs exp in IT field as 
HR Rep/Executive or Admin 
Mgr. Bach w/over 5 yrs exp 
acceptable in lieu of Masters 
Excellent Pay & Benefits. Mail 
resume to: Job Code 
MTRBPS: HR Dept, Blue 
Planet Solutions, Inc, 36 
Route 0 e E, East 
Hanover, NJ 07936 or via 
email to 
hr@blueplanetsolutions.com 


CUSTOMER ENGINEER - To 
and develop software sys 


maintain and enhance 


related systems using 

and Object Oriented 

Salary $762.60 

work wk.(9:00 a.m 

>quirements: B.A 

omp' Science & Engin 
eering & One yr. Experience as 
System Analyst. Applicant must 
have completed vocational work 
shop in Object Oriented Analysis 
and Design. Employer Paid Ad 
{Send resumes to MDCD/ESA 
Box 11170, Detroit, Ml 

1170 (Ref. No. 210343) 


ITcareers and 
ITcareers.com 
reach more than 
2/3 of all US IT 
workers every 
week. If you 
need to hire top 
talent, start by 


hiring us. 


Call your 
ITcareers Sales 
Representative 
or Nancy 
Percival at 


1-800-762-2977. 


ITCAREERS 


the best 
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SURE 
COMPUTERWORLD, 
INFOWORLD,AND 
NETWORKWORLD 


Heir You. Do 


A BETTER JOB. 


Now Let US HELP 
You GeT One. 


CALA: 
1-800-762-2977 
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Continued from page 1 
Sarbanes Apps 


Caribbean Cruises Ltd., said 
the Miami-based cruise line is 
using software and services 
developed by Netherlands- 
based KPMG International as 
part of its compliance efforts. 
Having a wide range of 
packaged applications that can 
automate Sarbanes-Oxley 
compliance is expected to be- 
come increasingly important 
for IT managers in the coming 
months. According to survey 
results released last week by 
Boston-based AMR Research 
Inc., 85% of the 60 
Fortune 1,000 com- 
panies that respond- 
ed said they plan to 
modify their IT sys- 
tems to support the 
compliance process. 
But some IT lead- 
ers are still trying to 
get their arms 
around the require- 
ments of the Sar- 
banes-Oxley Act — 
which was signed 
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into law last summer 
— before deciding 
on technologies that 
can help their com- 
panies meet the new 
standards. 

“We have yet to in- 
vestigate the tools 
associated with the 
S-O Act,” said Bob 
Schwartz, CIO at Ma- 
tsushita Electric Cor- 
poration of America’s Pana- 
sonic Co. division in Secaucus, 
N.J. Schwartz added that Pana- 
sonic officials haven’t fully di- 
gested the new financial re- 
porting requirements and 
don’t plan to consider buying 
new software until 
they have done so. 

Part of the prob- 
lem is that CIOs and 
other corporate man- 
agers are “awaiting 
additional guidance” 
from the Securities 
and Exchange Com- 
mission on the spe- 
cific steps they need 
to take to achieve 
Sarbanes-Oxley com- 
pliance, said Harald 
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Will, president and 
CEO of ACL Services 
Ltd., a Vancouver, 
British Columbia- 
based vendor of soft- 
ware for financial ex- 
ecutives. 

San Jose-based Nth 
Orbit Inc. last week 
introduced software 
called Certus that’s 
aimed at helping 


| companies develop the neces- 


sary internal compliance proc- 
esses. The software is priced 
at $100,000 to $500,000, de- 
pending on the user compa- 
ny’s annual revenue, said Dei- 
dre Paknad, Nth Orbit’s vice 
president of market- 
ing and business de- 
velopment. 

Certus uses a 
framework-driven 
approach that no oth- 
er technology vendor 
has taken, said AMR 
analyst John Hagerty. 
Other vendors, such 
as Hyperion Solu- 
tions Corp. in Sunny- 
vale, Calif., “have 
tried to take what 
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| they have and fit it into Sar- 
banes-Oxley,” Hagerty said. 
Early last month, Hyperion 
added built-in capabilities for 
meeting the Sarbanes-Oxley 
reporting requirements to its 
financial management soft- 
ware [QuickLink 38358]. 

In addition, document man- 
agement vendors like Docu- 
mentum Inc. and OpenText 
Corp. have added workflow 
and audit-trail templates to 
their software in a bid to help 
users meet some Sarbanes- 
Oxley requirements, said Re- 
becca Wettemann, an analyst 
at Nucleus Research Inc. in 
Wellesley, Mass. 

“We see a lot of 
[business-intelli- 
gence] and workflow 
companies saying 
they’re providing 
Sarbanes-Oxley com- 
pliance solutions 
now,” Wettemann 
said. But, she added, 
it’s not clear whether 





the vendors are “pro- | 


viding the level of 
process [support] 
that’s needed.” D 





Oracle Tools Designed to Help 
Monitor Financial Controls 


New app automates 
audits, sends alerts 
about potential fraud 


BY MARC L. SONGINI 
Oracle Corp. is rolling out 
software tools that it said will 
enable companies to automate 
a key part of the process of 
meeting the financial report- 
ing requirements imposed by 
the Sarbanes-Oxley Act. 
Oracle last week announced 
Internal Controls Manager, an 
addition to its E-Business 
Suite applicatious that can be 
used to document corporate 
financial controls and test in- 
ternal processes to ensure 
they comply with Sarbanes- 
Oxley mandates. The vendor 





said it developed the product 
with help from auditing firm 
PricewaterhouseCoopers LLP, 
which offered input on ac- 
counting best practices. 
According to Steve Miranda, 
vice president of application 
development at Oracle, Inter- 
nal Controls Manager pro- 
vides functionality for estab- 
lishing a certifiable auditing 
process, plus control features 
that can alert auditors or cor- 
porate executives to potential 
reporting errors or fraudulent 
activities. For example, users 
could get an on-screen prompt 
if an expense was mistakenly 
entered as an asset. 
Companies can also link the 
software’s documentation ca- 
pabilities directly to their fi- 





nancial-control procedures so 
end users can access informa- 
tion such as when the last au- 
dit was performed, who is re- 
sponsible for a particular 
phase of the auditing process 
or how revenue is being 
booked, Miranda said. 

Internal Controls Manager 
is due for release this summer 
as part of E-Business Suite and 
will also be sold as a stand- 
alone application for compa- 
nies that use other ERP sys- 
tems. However, Miranda said 
users will have to develop 
their own software hooks to 
link the tool to applications 
from other vendors. 

Oracle isn’t alone among 
ERP software vendors in its 
efforts to help companies deal 
with the financial reporting 
law. SAP AG and PeopleSoft 
Inc. already offer technologies 


| similar to Internal Controls 


Manager, according to officials 


at those two vendors. 
PeopleSoft introduced an 
initial financial reporting ap- 
plication last year, and the 
Pleasanton, Calif.-based com- 
| pany announced the addition 
of Sarbanes-Oxley compliance 
support at a conference last 
month — though the new ca- 
pabilities are being provided 
partly as a services offering. 
A spokeswoman for SAP 
said its mySAP Financials soft- 
| ware now “delivers almost 
everything needed to enable 
Sarbanes-Oxley compliance.” 
“Everyone is jumping on 
this bandwagon,” said John 
Moore, an analyst at ARC Ad- 
visory Group Inc. in Dedham, 
Mass. “It’s hard to find an en- 
terprise resource planning 
company that hasn’t men- 
tioned something about how 
their solutions or new en- 
hancements can help compa- 
nies comply.” DB 
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SEC Extends 
Its Deadline for 
Compliance 


Under a new rule announced 
last week by the SEC, iarge 
publicly held companies are 
being granted a nine-month 
extension on the deadline for 
meeting the financial reporting 
and certification requirements 
of Sarbanes-Oxley. 

The SEC is now requiring 
most public companies to in- 
clude an assessment of their 
internal accounting controls 
that shows compliance with 
Sarbanes-Oxley as part of all 
year-end financial statements 
filed after June 15, 2004. 
Smaller U.S. businesses and 
foreign companies wil! have 
until April 15, 2005. 

The SEC's decision to ex- 
tend the compliance deadline 
provides companies “with a bit 
more breathing room” on Sar- 
banes-Oxley, said AMR Re- 
search analyst John Hagerty. 
That could relieve some pres- 
sure, because there's still “a 
tremendous amount of confu- 
sion” among IT managers 
about what they need to do to 
comply, he added. 

But Hagerty said he’s con- 
cerned that some companies 
could use the extension as an 
excuse to put off needed IT 
work. “Corporate governance 
mandates are inevitable, and 
smart companies will not delay 
efforts to get core processes 
and controls in place now,” he 
wrote in a research note. 

Some companies with multi- 
ple business units that run a 
mix of financial applications 
hope to use the Sarbanes-Ox- 
ley requirements as an oppor- 
tunity to standardize on a sin- 
gle corporate finance system, 
said Rebecca Wettemann, an 
analyst at Nucleus Research. 
“We see that as a key motiva- 
tion for companies considering 
ERP [investments],” she noted. 

- Thomas Hoffman 
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CO's Sordid Mess 


ET’S SEE IF WE’VE GOT THIS RIGHT: It turns out that 
SCO Group doesn’t actually have the Unix-related copy- 
rights and patents it led people to believe it had. It turns 
out that Novell, from which SCO implied it had acquired 
those copyrights and patents, refused to transfer them to 
SCO. And it turns out that SCO has known this for a while, because 
SCO kept sending Novell letters asking Novell to transfer the copy- 
rights and patents to SCO, and Novell ignored SCO’s letters (see 


story, page 7). 


So lots of what we thought we knew about 
this SCO mess turns out to be wrong. Which 
raises an obvious question: What do we know? 

Well, we know SCO does have the right to li- 
cense Unix source code to companies like Mi- 
crosoft. And SCO does have Unix license con- 
tracts with IBM, Sun, Hewlett-Packard and oth- 
er hardware and software vendors, some of 
which it inherited from AT&T, which created 
Unix at its Bell Labs. 

And we now have a pretty good idea of SCO’s 
philosophy on the subject of software licenses 
and other contracts. As the company put it in a 
terse, inelegantly worded statement last week: 
“Contracts are what you use against parties you 
have relationships with.” No doubt that’s useful 
to know for SCO’s 6,000-odd Unix licensees. 
They probably thought those contracts were 
about a mutual benefit. Now they know SCO 
sees them as a weapon. 

We know SCO is now explaining that its law- 


suit against IBM is really just a contract dispute, 


not a suit over copyrights and patents — a fairly 
safe position for the moment, since we don’t 
know exactly what’s in the IBM Unix contract. 

But SCO isn’t offering explanations for why it 
recently sent threatening letters to nearly 1,500 
large companies, suggesting that 
their use of Linux might put them in 
legal jeopardy because of copyright 
and patent issues. Most of those 
companies don’t have contracts that 
SCO could use against them. In fact, 
one of those companies was Novell, 
which actually owns the Unix copy- 
rights and patents that SCO was 
suggesting it had. 

We finally do have an explanation 





little more than a statement that said that vir- 
tually nothing in SCO’s lawsuit is true. Thanks 
to Novell, we now know that as far as owner- 
ship of the copyrighted Unix source code IBM 
originally licensed from AT&T goes, IBM was 
exactly right. 

And thanks to Novell, we now have a pretty 
good idea of what happens when hard facts 
meet heavy FUD. Last Wednesday morning, 
SCO issued a healthy quarterly financial report 
— the company was actually profitable again. 
That same morning, Novell made its statement 
that it had never transferred Unix copyrights 
and patents to SCO. 

Result: SCO’s stock plunged, losing nearly 
25% of its value by Wednesday night. That lets 
us know pretty decisively what investors were 
looking at when they bid up the price of SCO. 
SCO’s biggest asset was the saber rattling it did 
for its billion-dollar lawsuit against IBM. And 
now investors no longer believe there’s any 
saber left to rattle. 

So, to summarize: SCO’s lawsuit against IBM 
turns out to be a lot narrower than SCO had im- 
plied. SCO’s claims against companies that 
don’t have contracts with SCO turn out to be 
nonexistent. And SCO’s inflated stock turns out 
to have nowhere to go but down. 

Which means there are really 
just two things left that we don’t 
know when it comes to SCO. 

We don’t know whether SCO can 
actually be saved from the hole 
that CEO Darl McBride has dug for 
it — reputation damaged, credibili- 
ty shot, customer hostility at an 
all-time high. 

And we don’t know how much 


Ah, My Mistake 


www.computerworld.com 


Traveling employees are literally destroying their fap- 
tops, this pilot fish says. So when one vendor rep says 
his laptop can be thrown to the floor without damage 
~ try it, he says - fish is impressed and asks the 
agency head to come see. “The head guy walks into 
this office without a word, picks up the laptop and 
slams it to the floor,” fish reports, “just as my assistant 
informs him we are in the next office.” 


Pumped 


User has set up 
her new com- 
puter at home, 
but there seems 
to be one part left over, 
she tells support pilot: 
fish. It’s a small box with : 
a power cord and alittle 
round hole, and after 
20 head-scratching 
minutes, fish still can’t 
identify it. Finally user 
puts her 13-year-old 
son on the phone, and 
fish asks him about it. 
“What?” he says. “The 
fish tank pump?” 


SHARK 
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though,” fish 
says. “I'd be 
standing next 
to it and all of a 
sudden the 


den power hit.” 


: Pilot fish doing tech 
: support for the U.S. 
: Army in Kuwait says the 
? biggest culprit for com- 


: puter problems there - 
; besides users - is sand. 
: “All the computer stores 


: Sold out of canned air 


; long ago,” he says. “So 


So It Must Work 
Support pilot gets a call: 
from a user whose new 
PC is shutting down at 
random. User suggests 
the cause might be a 

virus-laden e-mail but 
then mentions that the 
monitor, printer and fax: 
machine are shutting 
down, too. Are they ail 
plugged into the same 
power strip? fish asks. 
“Yes, but that couldn't 
be it,” user says. “I've 
had that for years.” 


: being an old soldier my- 


self, | told the soldiers to 


: use the air hoses on 

: their trucks to keep their 
; systems cleaned oui. As 
: long as they keep the 

: pressure low, it works 

: like a champ.” 


: ALong, Long Time 
} a scheduling system, it 
? looks fine until his test 
: job hits March. “Then 

} ning on the wrong days 


: of the week,” fish says. 


Wake-up Call 
This DOS-based mail- 
routing server keeps 
locking up for reasons 
unknown, reports pilot 
fish. Boss's fix: Put a 
kitchen timer on the PC 
to force a hard reboct 
once an hour. And it 
works, sort of. “Never 


: Turns out the software 
? isn’t recognizing the 

: extra day in a leap year. 
: seems hazy on the prob- 
? dem. “Fill have to bump 

: this one up higher,” tech 
: tells fish. “Can you tell 

: me how long this leap- 


FEED THE SHARK! Send your true tale of IT life to 


You snag a snazzy 


FRANK HAYES, Computer- 
world's senior news colum- 
nist, has covered IT for more 
than 20 years. Contact him at 


longer it will take before Ray Noor- 
da, who owns nearly half of SCO, 
will finally pull the plug on this 
sordid, sorry mess. D 


for why IBM’s legal brief respond- 
ing to SCO’s lawsuit was so, well, 
brief. If you haven’t read it or heard 
about it, IBM’s legal response was 


Shark shirt if we use it. And check out the daily feed, browse 
the Sharkives and sign up for Shark Tank home delivery at 
computerworld.com/sharky. 








Find out when 
Computerworld 
publishes the 
results from our 
17th Annual 
Salary Survey of 
|T Professionals! 
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How much are other IT professionals with your experience and credentials earning? 
With help from you and your IT colleagues across the country, Computerworld will 
answer those questions with results from our 17th Annual Salary Survey. 

Please take our survey now and enter a drawing to win a $499 gift certificate from 
Amazon.com. Our survey period closes on Thursday, July 3 at 5:00 p.m. 

Survey results and feature stories that offer practical career advice will be published in 
the October 27, 2003, issue of Computerworld. The issue will offer detailed informa- 
tion on average salaries and bonuses, by title, industry and region. You'll be able to 
compare your organization's compensation plans with those of other 

organizations and find the hottest areas of the country for IT pay. 
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To take the survey, and qualify for the drawing, go to: SURVEY 


computerworld.com/ss2003 ?( )( ) 3 
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